437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:49 executing program 1:
r0 = socket$inet(0x2, 0x80000000003, 0x1c)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETAF(r1, 0x5408, 0x0)

00:00:49 executing program 5:
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x89e1, &(0x7f0000000000))

00:00:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:49 executing program 5:
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x89e1, &(0x7f0000000000))

00:00:49 executing program 1:
r0 = socket$inet(0x2, 0x80000000003, 0x1c)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETAF(r1, 0x5408, 0x0)

00:00:49 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, &(0x7f0000000000))

00:00:49 executing program 1:
r0 = socket$inet(0x2, 0x80000000003, 0x1c)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETAF(r1, 0x5408, 0x0)

00:00:49 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, &(0x7f0000000000))

00:00:49 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab960490000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1)

00:00:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40086310}], 0x0, 0x0, 0x0})

[  603.728861] binder: 27336:27337 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  603.741594] binder: 27336:27338 BC_DEAD_BINDER_DONE 0000000000000000 not found
00:00:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:50 executing program 0:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

00:00:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:50 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, &(0x7f0000000000))

00:00:50 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:50 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e9, &(0x7f0000000000))

00:00:50 executing program 0:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  604.029128] binder: 27341:27345 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  604.057029] binder: 27341:27345 unknown command 0
[  604.073236] binder: 27341:27345 ioctl c0306201 20008fd0 returned -22
[  604.094591] syz-executor.4 uses old SIOCAX25GETINFO
00:00:50 executing program 5:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x89e1, &(0x7f0000000000))

[  604.125533] binder: 27341:27355 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
00:00:50 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x110)

[  604.174218] binder: 27341:27355 unknown command 0
00:00:50 executing program 0:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

00:00:50 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  604.196296] binder: 27341:27355 ioctl c0306201 20008fd0 returned -22
00:00:50 executing program 5:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x89e1, &(0x7f0000000000))

00:00:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:50 executing program 5:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x89e1, &(0x7f0000000000))

00:00:50 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:51 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, 0x0)

00:00:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  604.955740] binder: 27374:27380 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  604.982964] binder: 27374:27380 unknown command 0
[  604.993734] binder: 27374:27380 ioctl c0306201 20008fd0 returned -22
00:00:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x1274, 0x0)

00:00:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:51 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

[  605.189531] binder: 27397:27402 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  605.197957] binder: 27397:27402 unknown command 0
[  605.204099] binder: 27397:27402 ioctl c0306201 20008fd0 returned -22
00:00:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:51 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, 0x0)

00:00:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:51 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:51 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
ioctl$sock_TIOCINQ(r0, 0x89e1, 0x0)

[  605.847080] binder: 27412:27417 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  605.889764] binder: 27412:27417 unknown command 0
[  605.899749] binder: 27412:27417 ioctl c0306201 20008fd0 returned -22
00:00:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:52 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:52 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x110)

00:00:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:52 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:52 executing program 4:
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

00:00:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:52 executing program 4:
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

00:00:52 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:52 executing program 4:
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

00:00:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:53 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x110)

00:00:53 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:53 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:53 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:53 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2279, 0x0)

00:00:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:53 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:53 executing program 4:
syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

00:00:53 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

[  607.703467] binder: 27493:27497 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  607.714040] binder: 27493:27497 unknown command 0
[  607.719417] binder: 27493:27497 ioctl c0306201 20008fd0 returned -22
[  607.788257] binder: 27502:27505 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  607.798933] binder: 27502:27505 unknown command 0
[  607.814726] binder: 27502:27505 ioctl c0306201 20008fd0 returned -22
00:00:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="01141419aae0000001010000000600000000000000ac1414bbac1e0001ac14141a100000"], 0x1)
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0xffffffffffffff91)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '{\x1b:\x00'})
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x9, 0x2, 0x1, 0x1}, 0x8)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x80)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x202, 0xfffffffffffffffe, 0x200, 0x8, 0x5, 0x5}, 0x20)
add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
fcntl$setflags(r2, 0x2, 0x1)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc)
prctl$PR_GET_FP_MODE(0x2e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000100))
close(r4)
ioctl$int_in(0xffffffffffffffff, 0x80000080045017, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="000059fdf68d2575ffd500193632cc350000000000e507000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000080000070000000000000000000000009000007903000000000000010000000000000000000000000000000000000000000000000000000000000008000000ffffff7f0100000000000000ff0000000000000003000000000000000600000000aa717814de14916b864d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098e4f17e279e3d4713fb0000000000000000a991f5410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000cd1f1633bb0000000000000000000000000000000000004a23cdfe6cafdc13669de7192697bdb252e0d6b0197e26acc1c02b24c5173d7a6588f6b560cf453ff4a3b3e870879252138f1d1d5833ab18a5a8c391ae6c1e7d0ee401352d75cba3eb99c153f996317638fe19b54c23a7565f94c1c5fb081c87b1e2365805ba3b380939ee51419a40c5e297b8b7cc2016e3de3a70cd5fe2c4ded258fff2eb08fa9f0df502d440c3bf264a779afe812c5c7a10897ff3731917a13bb58a1b2326bfabafcc52ee30b890825cf15ebb96128db0da2ee83e718e0e904c935c7c6fd6c7b78ee12463852e39c28be1d92b2a6752a969682efc12ae81f4fbefcff8ee84008000000000000055ff82c841c65451d245799dc49cb33eb375c727b17163d93d90c113138a7f6945aa8a4071fc422f611df68bdc9315d6"])
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

00:00:54 executing program 4:
syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

00:00:54 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:54 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:54 executing program 4:
syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0)

[  607.978280] binder: 27512:27515 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  607.989730] binder: 27512:27515 unknown command 0
[  608.004223] binder: 27512:27515 ioctl c0306201 20008fd0 returned -22
00:00:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:54 executing program 1:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:54 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="01141419aae0000001010000000600000000000000ac1414bbac1e0001ac14141a100000"], 0x1)
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0xffffffffffffff91)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '{\x1b:\x00'})
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x9, 0x2, 0x1, 0x1}, 0x8)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x80)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x202, 0xfffffffffffffffe, 0x200, 0x8, 0x5, 0x5}, 0x20)
add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
fcntl$setflags(r2, 0x2, 0x1)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc)
prctl$PR_GET_FP_MODE(0x2e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000100))
close(r4)
ioctl$int_in(0xffffffffffffffff, 0x80000080045017, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"])
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

00:00:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:54 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  608.555031] binder: 27530:27538 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
00:00:54 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  608.598063] binder: 27530:27538 unknown command 0
[  608.639488] binder: 27530:27538 ioctl c0306201 20008fd0 returned -22
00:00:54 executing program 1:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:54 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:54 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="01141419aae0000001010000000600000000000000ac1414bbac1e0001ac14141a100000"], 0x1)
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0xffffffffffffff91)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '{\x1b:\x00'})
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x9, 0x2, 0x1, 0x1}, 0x8)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x80)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x202, 0xfffffffffffffffe, 0x200, 0x8, 0x5, 0x5}, 0x20)
add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
fcntl$setflags(r2, 0x2, 0x1)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc)
prctl$PR_GET_FP_MODE(0x2e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000100))
close(r4)
ioctl$int_in(0xffffffffffffffff, 0x80000080045017, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"])
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

00:00:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  608.853662] binder: 27550:27556 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  608.882052] binder: 27550:27556 unknown command 0
[  608.887484] binder: 27550:27556 ioctl c0306201 20008fd0 returned -22
00:00:55 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:55 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:55 executing program 1:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="01141419aae0000001010000000600000000000000ac1414bbac1e0001ac14141a100000"], 0x1)
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0xffffffffffffff91)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '{\x1b:\x00'})
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x9, 0x2, 0x1, 0x1}, 0x8)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x80)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x202, 0xfffffffffffffffe, 0x200, 0x8, 0x5, 0x5}, 0x20)
add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
fcntl$setflags(r2, 0x2, 0x1)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc)
prctl$PR_GET_FP_MODE(0x2e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1)
r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000100))
close(r4)
ioctl$int_in(0xffffffffffffffff, 0x80000080045017, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="000059fdf68d2575ffd500193632cc350000000000e507000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000080000070000000000000000000000009000007903000000000000010000000000000000000000000000000000000000000000000000000000000008000000ffffff7f0100000000000000ff0000000000000003000000000000000600000000aa717814de14916b864d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098e4f17e279e3d4713fb0000000000000000a991f5410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000cd1f1633bb0000000000000000000000000000000000004a23cdfe6cafdc13669de7192697bdb252e0d6b0197e26acc1c02b24c5173d7a6588f6b560cf453ff4a3b3e870879252138f1d1d5833ab18a5a8c391ae6c1e7d0ee401352d75cba3eb99c153f996317638fe19b54c23a7565f94c1c5fb081c87b1e2365805ba3b380939ee51419a40c5e297b8b7cc2016e3de3a70cd5fe2c4ded258fff2eb08fa9f0df502d440c3bf264a779afe812c5c7a10897ff3731917a13bb58a1b2326bfabafcc52ee30b890825cf15ebb96128db0da2ee83e718e0e904c935c7c6fd6c7b78ee12463852e39c28be1d92b2a6752a969682efc12ae81f4fbefcff8ee84008000000000000055ff82c841c65451d245799dc49cb33eb375c727b17163d93d90c113138a7f6945aa8a4071fc422f611df68bdc9315d6"])
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

00:00:55 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r4, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:55 executing program 4:
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  609.457039] binder: 27566:27574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  609.478048] binder: 27566:27574 unknown command 0
[  609.507579] binder: 27566:27574 ioctl c0306201 20008fd0 returned -22
00:00:55 executing program 4:
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:55 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:00:55 executing program 4:
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  609.719256] binder: 27583:27587 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  609.771779] binder: 27583:27587 unknown command 0
[  609.787014] binder: 27583:27587 ioctl c0306201 20008fd0 returned -22
[  609.788915] binder: 27589:27591 ioctl c018620c 20008fd0 returned -22
[  609.835516] binder: 27589:27593 ioctl c018620c 20008fd0 returned -22
00:00:56 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:56 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r4, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:56 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:56 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
r1 = creat(0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0x0, 0x202, 0xfffffffffffffffe, 0x200, 0x0, 0x5, 0x5}, 0x20)
fcntl$setflags(r1, 0x2, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000340))
prctl$PR_GET_FP_MODE(0x2e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1)
r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000100))
close(r3)

00:00:56 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  610.348428] binder: 27597:27604 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  610.389600] binder: 27597:27604 unknown command 0
[  610.410458] binder: 27597:27604 ioctl c0306201 20008fd0 returned -22
00:00:56 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:56 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:56 executing program 5:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10004, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

00:00:56 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r4, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:56 executing program 4:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  610.576861] binder: 27616:27617 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  610.595574] binder: 27616:27617 unknown command 0
[  610.612256] binder: 27616:27617 ioctl c0306201 20008fd0 returned -22
00:00:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

[  610.758651] binder: 27630:27632 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  610.774006] binder: 27630:27632 unknown command 0
[  610.783531] binder: 27630:27632 ioctl c0306201 20008fd0 returned -22
00:00:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:57 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000280), 0x4)

00:00:57 executing program 4:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:57 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

00:00:57 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:57 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

00:00:57 executing program 4:
syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  611.238079] binder: 27641:27644 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  611.269984] binder: 27641:27644 unknown command 0
00:00:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_GET_IRQCHIP(r2, 0x4008ae6a, &(0x7f0000003580)={0x0, 0x0, @ioapic})

[  611.298734] binder: 27641:27644 ioctl c0306201 20008fd0 returned -22
00:00:57 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

00:00:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:57 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  611.516253] binder: 27664:27667 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  611.530178] binder: 27664:27667 unknown command 0
[  611.539086] binder: 27664:27667 ioctl c0306201 20008fd0 returned -22
00:00:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="8da4363ac0ed0000f5ffffff0000004d01000000000000010002000000000000ecf6f2a2299748aeb81eff7f000000030000010000000000010000008cffffff5f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

00:00:58 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:58 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

00:00:58 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0xffffffffffffff77, 0x4)

[  612.136562] binder: 27673:27678 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  612.166432] binder: 27673:27678 unknown command 0
00:00:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x715000)

00:00:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  612.196686] binder: 27673:27678 ioctl c0306201 20008fd0 returned -22
00:00:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:58 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, 0x0, 0x0)

00:00:58 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0xfff, 0xe4)

[  612.392131] binder: 27696:27700 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  612.407683] binder: 27696:27700 unknown command 0
[  612.418352] binder: 27696:27700 ioctl c0306201 20008fd0 returned -22
00:00:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:00:59 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:00:59 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, 0x0, 0x0)

00:00:59 executing program 5:
mkdir(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r1, 0x0, 0x0)

00:00:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:59 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, 0x0, 0x0)

[  613.062152] binder: 27707:27714 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  613.083274] binder: 27707:27714 unknown command 0
00:00:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  613.106512] binder: 27707:27714 ioctl c0306201 20008fd0 returned -22
00:00:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:00:59 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), 0x4)

00:00:59 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:00:59 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), 0x4)

[  613.269914] binder: 27729:27734 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  613.277992] binder: 27729:27734 unknown command 0
[  613.283074] binder: 27729:27734 ioctl c0306201 20008fd0 returned -22
00:01:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:00 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  613.953286] binder: 27741:27745 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  613.968860] binder: 27741:27745 unknown command 0
[  613.986921] binder: 27741:27745 ioctl c0306201 20008fd0 returned -22
00:01:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:02 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x80000000000005, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), 0x4)

00:01:02 executing program 5:
mkdir(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r1, 0x0, 0x0)

00:01:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:02 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x4008700e)

[  616.028189] binder: 27755:27760 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  616.065316] binder: 27755:27760 unknown command 0
00:01:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  616.079817] binder: 27755:27760 ioctl c0306201 20008fd0 returned -22
00:01:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000380)={[{@space_cache_v2='space_cache=v2'}, {@compress_algo={'compress', 0x3d, 'zstd'}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]})

00:01:02 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:02 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r0, 0x0)

00:01:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  616.252576] binder: 27778:27780 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  616.274322] binder: 27778:27780 unknown command 0
[  616.283899] binder: 27778:27780 ioctl c0306201 20008fd0 returned -22
00:01:02 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r0, 0x0)

[  616.292228] audit: type=1400 audit(1555977662.383:172): avc:  denied  { map } for  pid=27781 comm="syz-executor.4" path="/dev/vbi0" dev="devtmpfs" ino=15494 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1
00:01:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:05 executing program 4:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000100))
close(r1)

00:01:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:05 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

[  619.069643] binder: 27794:27800 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  619.094163] binder: 27794:27800 unknown command 0
[  619.097455] binder: 27803:27805 BC_INCREFS_DONE u0000000000000000 no match
[  619.126817] binder: 27803:27807 BC_INCREFS_DONE u0000000000000000 no match
[  619.133428] binder: 27794:27800 ioctl c0306201 20008fd0 returned -22
00:01:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1274, 0x0)

00:01:05 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:05 executing program 4:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0)

[  619.285057] binder: 27812:27819 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  619.298647] binder: 27816:27820 BC_INCREFS_DONE u0000000000000000 no match
[  619.308988] binder: 27812:27819 unknown command 0
00:01:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  619.334714] binder: 27812:27819 ioctl c0306201 20008fd0 returned -22
00:01:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:05 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0)

[  619.452577] binder: 27827:27831 BC_INCREFS_DONE u0000000000000000 no match
[  619.496155] binder: 27832:27835 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  619.515378] binder: 27832:27835 unknown command 0
00:01:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  619.542754] binder: 27832:27835 ioctl c0306201 20008fd0 returned -22
[  619.629447] binder: 27840:27842 BC_INCREFS_DONE u0000000000000000 no match
00:01:05 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:05 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0)

00:01:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  619.908871] binder: 27845:27852 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  619.945851] binder: 27845:27852 unknown command 0
00:01:06 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0)
clone(0x70024001, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a04, 0x0)

00:01:06 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  619.980957] binder: 27845:27852 ioctl c0306201 20008fd0 returned -22
00:01:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  620.091323] audit: type=1400 audit(1555977666.173:173): avc:  denied  { sys_admin } for  pid=27858 comm="syz-executor.4" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
00:01:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  620.149696] binder: 27866:27871 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  620.163420] binder: 27866:27871 unknown command 0
[  620.175884] binder: 27866:27871 ioctl c0306201 20008fd0 returned -22
00:01:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:06 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  620.779393] binder: 27881:27884 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  620.814606] binder: 27881:27884 unknown command 0
[  620.826887] binder: 27881:27884 ioctl c0306201 20008fd0 returned -22
00:01:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

[  620.870921] IPVS: ftp: loaded support on port[0] = 21
[  620.924756] binder: 27893:27894 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  620.939692] binder: 27893:27894 unknown command 0
[  620.944983] binder: 27893:27894 ioctl c0306201 20008fd0 returned -22
00:01:07 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:07 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:07 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  621.239366] binder: 27899:27903 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  621.276750] binder: 27899:27903 unknown command 0
00:01:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  621.293409] binder: 27899:27903 ioctl c0306201 20008fd0 returned -22
00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

[  621.362748] binder: 27907:27911 BC_INCREFS_DONE u0000000000000000 no match
00:01:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:07 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:07 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:07 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  621.685136] binder: 27921:27925 BC_INCREFS_DONE u0000000000000000 no match
00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:07 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:07 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

[  621.866713] binder: 27937:27943 BC_INCREFS_DONE u0000000000000000 no match
00:01:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x0, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:08 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:08 executing program 5:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})

00:01:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:08 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  622.581938] binder: 27954:27961 BC_INCREFS_DONE u0000000000000000 no match
00:01:08 executing program 5:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  622.720858] binder: 27968:27972 ioctl c0306201 0 returned -14
[  622.738448] binder: 27969:27970 BC_INCREFS_DONE u0000000000000000 no match
00:01:08 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:08 executing program 5:
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  622.914646] binder: 27979:27983 BC_INCREFS_DONE u0000000000000000 no match
[  622.931073] binder: 27980:27984 ioctl c0306201 0 returned -14
00:01:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x0, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:09 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:09 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

00:01:09 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:09 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  623.484957] binder: 27992:27994 BC_INCREFS_DONE u0000000000000000 no match
[  623.496563] binder: 27987:27996 ioctl c0306201 0 returned -14
00:01:09 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:09 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

[  623.642114] binder: 28002:28006 BC_INCREFS_DONE u0000000000000000 no match
00:01:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x0, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:10 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:10 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:10 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

00:01:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  624.361423] binder: 28020:28026 BC_INCREFS_DONE u0000000000000000 no match
00:01:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:10 executing program 4:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

00:01:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:10 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  624.510177] binder: 28034:28038 BC_INCREFS_DONE u0000000000000000 no match
00:01:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:11 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  625.225251] binder: 28054:28059 BC_INCREFS_DONE u0000000000000000 no match
00:01:11 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x4000000000, @rand_addr=0x3, 0x4e24, 0x4, 'wrr\x00', 0x11, 0x5, 0x14}, {@remote, 0x4e20, 0x0, 0x0, 0x98, 0x20}}, 0xfffffffffffffe61)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000002c0)='./bus\x00')
setxattr$security_evm(0x0, 0x0, &(0x7f0000000500)=@v1={0x2, "fbfc5a8b9676295dd98da1d27b"}, 0xe, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendfile(r2, r2, &(0x7f0000000240), 0x808100000000)

00:01:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  625.370575] binder: 28068:28074 BC_INCREFS_DONE u0000000000000000 no match
00:01:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  625.522723] binder: 28081:28083 BC_INCREFS_DONE u0000000000000000 no match
00:01:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:12 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:12 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x4000000000, @rand_addr=0x3, 0x4e24, 0x4, 'wrr\x00', 0x11, 0x5, 0x14}, {@remote, 0x4e20, 0x0, 0x0, 0x98, 0x20}}, 0xfffffffffffffe61)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000002c0)='./bus\x00')
setxattr$security_evm(0x0, 0x0, &(0x7f0000000500)=@v1={0x2, "fbfc5a8b9676295dd98da1d27b"}, 0xe, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendfile(r2, r2, &(0x7f0000000240), 0x808100000000)

00:01:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:12 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  626.118367] binder: 28090:28095 BC_INCREFS_DONE u0000000000000000 no match
00:01:12 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, 0x0)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:12 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x4000000000, @rand_addr=0x3, 0x4e24, 0x4, 'wrr\x00', 0x11, 0x5, 0x14}, {@remote, 0x4e20, 0x0, 0x0, 0x98, 0x20}}, 0xfffffffffffffe61)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000002c0)='./bus\x00')
setxattr$security_evm(0x0, 0x0, &(0x7f0000000500)=@v1={0x2, "fbfc5a8b9676295dd98da1d27b"}, 0xe, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendfile(r2, r2, &(0x7f0000000240), 0x808100000000)

00:01:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  626.306561] binder: 28108:28110 BC_INCREFS_DONE u0000000000000000 no match
00:01:12 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:12 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:13 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x4000000000, @rand_addr=0x3, 0x4e24, 0x4, 'wrr\x00', 0x11, 0x5, 0x14}, {@remote, 0x4e20, 0x0, 0x0, 0x98, 0x20}}, 0xfffffffffffffe61)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000002c0)='./bus\x00')
setxattr$security_evm(0x0, 0x0, &(0x7f0000000500)=@v1={0x2, "fbfc5a8b9676295dd98da1d27b"}, 0xe, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendfile(r2, r2, &(0x7f0000000240), 0x808100000000)

00:01:13 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  627.089582] binder: 28132:28138 BC_INCREFS_DONE u0000000000000000 no match
00:01:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:13 executing program 1:
creat(&(0x7f0000000380)='./bus\x00', 0x20)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10000004d)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
write$P9_RSYMLINK(r0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x785f, @loopback, 0x7}}}, 0x88)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
open(&(0x7f0000000280)='./bus\x00', 0x2202, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffbfe000005, 0x0, 0x2, 0xa})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x400000, 0x0)

00:01:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:13 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  627.276304] binder: 28150:28152 BC_INCREFS_DONE u0000000000000000 no match
00:01:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

[  627.455357] binder: 28159:28168 BC_INCREFS_DONE u0000000000000000 no match
00:01:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:01:14 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:14 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:14 executing program 1:

00:01:14 executing program 1:

[  627.998069] binder: 28178:28180 BC_INCREFS_DONE u0000000000000000 no match
00:01:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:14 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00'})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001940))

00:01:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:01:14 executing program 1:
socket$inet(0x2, 0x7fff7, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x28200)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
syz_open_dev$midi(0x0, 0x9, 0x400a00)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xff, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0)

00:01:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c12")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  628.178118] binder: 28190:28199 BC_INCREFS_DONE u0000000000000000 no match
[  628.235627] binder: 28202:28203 BC_INCREFS_DONE u0000000000000000 no match
00:01:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:14 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

00:01:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f2e1fadfaf0e0fff735fea0a000f016766c7442400225400006766c74424025bdf151c6766c744240600000000670f011424d8c46766c7442400feffffff6766c7442402006000006766c744240600000000670f011c2412690064950fc79877a7", 0x61}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x42fc]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x380)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x168, 0x0, 0x0, 0xfffffffffffffec7)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

00:01:14 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:14 executing program 1:
socket$inet(0x2, 0x7fff7, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x28200)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
syz_open_dev$midi(0x0, 0x9, 0x400a00)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xff, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0)

00:01:15 executing program 1:
socket$inet(0x2, 0x7fff7, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x28200)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
syz_open_dev$midi(0x0, 0x9, 0x400a00)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xff, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0)

[  628.907818] binder: 28210:28212 BC_INCREFS_DONE u0000000000000000 no match
00:01:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

00:01:15 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)

00:01:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319b")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

[  629.095598] binder: 28223:28228 BC_INCREFS_DONE u0000000000000000 no match
00:01:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008000500ac14141b080003000100050f"], 0x1}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff0446"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  629.201721] binder: 28230:28232 BC_INCREFS_DONE u0000000000000000 no match
00:01:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, r2, 0x0)

00:01:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001940))

00:01:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:15 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:15 executing program 1:
creat(&(0x7f0000000380)='./bus\x00', 0x20)
gettid()
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000019d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10000004d)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x5000)
sched_rr_get_interval(0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x0, {0x0, 0x2}}, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x2202, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x4002091, r1, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x400000, 0x0)

00:01:15 executing program 0:

00:01:15 executing program 0:

00:01:15 executing program 0:

00:01:16 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0)

00:01:16 executing program 0:

[  629.941246] device bridge_slave_1 left promiscuous mode
[  629.947216] bridge0: port 2(bridge_slave_1) entered disabled state
00:01:16 executing program 0:

00:01:16 executing program 0:

[  630.091217] device bridge_slave_0 left promiscuous mode
[  630.101775] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.356533] device hsr_slave_1 left promiscuous mode
[  630.406488] device hsr_slave_0 left promiscuous mode
[  630.466225] team0 (unregistering): Port device team_slave_1 removed
[  630.496545] team0 (unregistering): Port device team_slave_0 removed
[  630.519611] bond0 (unregistering): Releasing backup interface bond_slave_0
[  630.586735] bond0 (unregistering): Released all slaves
00:01:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(0xffffffffffffffff, r1, 0x0)

00:01:16 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

[  633.100235] IPVS: ftp: loaded support on port[0] = 21
[  633.462113] chnl_net:caif_netlink_parms(): no params data found
[  633.499182] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.505823] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.512956] device bridge_slave_0 entered promiscuous mode
[  633.519711] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.526566] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.533747] device bridge_slave_1 entered promiscuous mode
[  633.552296] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  633.561926] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  633.579297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  633.586758] team0: Port device team_slave_0 added
[  633.592635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  633.599800] team0: Port device team_slave_1 added
[  633.605342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  633.612672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  633.672463] device hsr_slave_0 entered promiscuous mode
[  633.710448] device hsr_slave_1 entered promiscuous mode
[  633.750692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  633.757705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  633.771928] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.778392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.785218] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.791664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.821740] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  633.828163] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.838582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  633.847395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  633.855899] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.862960] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.873878] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  633.879990] 8021q: adding VLAN 0 to HW filter on device team0
[  633.888957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  633.896931] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.903356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.921387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  633.929091] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.935522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.943531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  633.951781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  633.959873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  633.969671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  633.981272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  633.992021] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  633.998111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  634.013171] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  634.025832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.460773] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
00:01:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x2008007800, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20022, &(0x7f0000000080)=ANY=[@ANYBLOB=',rootcontext=root,rootcontext=s'])

00:01:21 executing program 1:
creat(&(0x7f0000000380)='./bus\x00', 0x20)
gettid()
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000019d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10000004d)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x5000)
sched_rr_get_interval(0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x0, {0x0, 0x2}}, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x2202, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x4002091, r1, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x400000, 0x0)

00:01:21 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0)

00:01:21 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(0xffffffffffffffff, r1, 0x0)

[  635.102873] binder: 28287:28288 BC_INCREFS_DONE u0000000000000000 no match
00:01:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}], 0x10}, 0x0)

00:01:21 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e})
ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0)

[  635.194727] binder: 28294:28300 BC_INCREFS_DONE u0000000000000000 no match
00:01:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd0")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7})
ftruncate(r2, 0x208204)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000003700)={0x0, 0x40000000000006})

00:01:21 executing program 4:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x7fff)
fallocate(r0, 0x1, 0x0, 0x1000001)
lseek(r0, 0x0, 0x4)

[  635.393779] binder: 28313:28315 BC_INCREFS_DONE u0000000000000000 no match
00:01:21 executing program 1:
creat(&(0x7f0000000380)='./bus\x00', 0x20)
gettid()
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000019d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10000004d)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x5000)
sched_rr_get_interval(0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x0, {0x0, 0x2}}, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x2202, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x4002091, r1, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x400000, 0x0)

00:01:21 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="acade1227b1080cfc940be2d2485dabb", 0x10}], 0x1}, 0x0)

00:01:21 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x757c7818)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x1)

00:01:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup3(r1, r0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x30, 0x19, 0xe09c7c6303c351e9, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0)

[  635.560674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4219 sclass=netlink_xfrm_socket pig=28332 comm=syz-executor.4
00:01:22 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)

00:01:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(0xffffffffffffffff, r1, 0x0)

00:01:22 executing program 0:
io_setup(0x1, &(0x7f0000000180)=<r0=>0x0)
io_getevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)
r1 = memfd_create(&(0x7f0000000080)='securitynoeev:ppp1b`ev\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x86}])

00:01:22 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:22 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

00:01:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:22 executing program 1:
io_setup(0x1, &(0x7f0000000180)=<r0=>0x0)
io_getevents(r0, 0x1, 0x2, &(0x7f0000000000)=[{}, {}], 0x0)
r1 = memfd_create(&(0x7f0000000080)='securitynoeev:ppp1b`ev\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x86}])

00:01:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000007, 0x11, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600)

00:01:22 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:22 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)

00:01:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

00:01:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000037, 0x0)

00:01:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, 0x0})

00:01:22 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)

00:01:22 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, 0x0, 0x1)

00:01:22 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @dev, 'team0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="b98c9e809880c15d27b58e19c3dc262e92564a1799a072e0a40256e8da15255d191debf7c62a4ac025d7a8d11aed62cc2fa586d551808b0651ed2a55d23d35bfd474a411b97fe18d495c59", 0x4b}], 0x1}, 0x6}, {{&(0x7f00000008c0)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x4c6}], 0x2, 0x0)

00:01:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

00:01:23 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
add_key(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0x0)

00:01:23 executing program 1:
r0 = socket$kcm(0x10, 0x400000400000003, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb91a02c804a00c000000810007fb120001000e00da1b40d819a906000500000f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0)

00:01:23 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)

00:01:23 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, 0x0, 0x1)

00:01:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  637.101241] binder: 28399:28408 ioctl c0306201 0 returned -14
[  637.230952] binder: 28413:28416 ioctl c0306201 0 returned -14
00:01:23 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')

00:01:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

00:01:23 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0x0)

00:01:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

00:01:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000037, 0x0)

00:01:23 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, 0x0, 0x1)

00:01:24 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r1)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
readv(r1, &(0x7f00000002c0), 0x17c)

[  637.898726] binder: 28422:28431 ioctl c0306201 0 returned -14
00:01:24 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, 0x0, 0x0)

00:01:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617cf0627a985227e1b330eff2bb50333e2cd631e50bf703b4564bc62e9", 0x0}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu\xed\xe1?\xd1\x90\x93=c5W\xd1W\xfe\x01\x00#\xdax\xa8\t\x9buE\x81\x81\xaa\xa94B/F\x85D!\xa4\x85f\xe5\x02\xe0\xff\x00\x10\x00\xb2u%\x99\x895#\xf4\x16\x00\x00\x00\x00\x00\x88\x00'/78, 0x0, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="c103000000003c0000021fe4ac061417e0000001e55942f6465ec71d62c5ab12b04b2ade6a0c1596", 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
recvmsg(r3, &(0x7f0000009740)={&(0x7f0000009000)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009080)=""/141, 0x8d}, {&(0x7f0000009140)=""/171, 0xab}, {&(0x7f0000009200)=""/255, 0xff}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {&(0x7f0000009440)=""/155, 0x9b}, {&(0x7f0000009500)=""/30, 0x1e}, {&(0x7f0000009540)=""/140, 0x8c}], 0x8, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780)=r6)
r7 = socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(r7, 0x0, 0x40000)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x7)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:01:24 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:24 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x80001, @local, 'gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'veth0\x02\x00\x00\x00\x00\x00\x00e\xe0\xff\xff'}})

00:01:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

00:01:24 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:01:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000940000)={0x2, 0x5b, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

00:01:24 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000680), 0x0)

00:01:24 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617cf0627a985227e1b330eff2bb50333e2cd631e50bf703b4564bc62e9", 0x0}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu\xed\xe1?\xd1\x90\x93=c5W\xd1W\xfe\x01\x00#\xdax\xa8\t\x9buE\x81\x81\xaa\xa94B/F\x85D!\xa4\x85f\xe5\x02\xe0\xff\x00\x10\x00\xb2u%\x99\x895#\xf4\x16\x00\x00\x00\x00\x00\x88\x00'/78, 0x0, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="c103000000003c0000021fe4ac061417e0000001e55942f6465ec71d62c5ab12b04b2ade6a0c1596", 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
recvmsg(r3, &(0x7f0000009740)={&(0x7f0000009000)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009080)=""/141, 0x8d}, {&(0x7f0000009140)=""/171, 0xab}, {&(0x7f0000009200)=""/255, 0xff}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {&(0x7f0000009440)=""/155, 0x9b}, {&(0x7f0000009500)=""/30, 0x1e}, {&(0x7f0000009540)=""/140, 0x8c}], 0x8, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780)=r6)
r7 = socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(r7, 0x0, 0x40000)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x7)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:01:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:25 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)

00:01:25 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000680), 0x0)

00:01:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0})

00:01:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617cf0627a985227e1b330eff2bb50333e2cd631e50bf703b4564bc62e9", 0x0}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu\xed\xe1?\xd1\x90\x93=c5W\xd1W\xfe\x01\x00#\xdax\xa8\t\x9buE\x81\x81\xaa\xa94B/F\x85D!\xa4\x85f\xe5\x02\xe0\xff\x00\x10\x00\xb2u%\x99\x895#\xf4\x16\x00\x00\x00\x00\x00\x88\x00'/78, 0x0, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="c103000000003c0000021fe4ac061417e0000001e55942f6465ec71d62c5ab12b04b2ade6a0c1596", 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
recvmsg(r3, &(0x7f0000009740)={&(0x7f0000009000)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009080)=""/141, 0x8d}, {&(0x7f0000009140)=""/171, 0xab}, {&(0x7f0000009200)=""/255, 0xff}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {&(0x7f0000009440)=""/155, 0x9b}, {&(0x7f0000009500)=""/30, 0x1e}, {&(0x7f0000009540)=""/140, 0x8c}], 0x8, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780)=r6)
r7 = socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(r7, 0x0, 0x40000)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x7)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:01:25 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="6e73cd1e01d70ec038074f340560f775082315cb123649e357b5fb6f709a23b5958876262e149dfb5e5ce0c15af601535a5a389bc2cc289129486954bccc6fa28ec7db3628dac24257451768bf2229d405f0520d50b6c71c5a247bf9dd8a45e6aa4f46d0465145fd9f874d8c83aea80d03c1f6cc1705f2b487e57a36b73c72748a8bda477fffe0593804bbc17595513ed04a64d368d791d7780d348156c970867b6380a27cc635a9ffa15c701265766d31511b91cf518e86b8da1624a9d99722ddb77c0b2e4f72b5b78d65a511cc9081242b4e8ebb26f437e8056a8ba933d0", 0xdf}], 0x1}, 0x1)

00:01:25 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

00:01:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617cf0627a985227e1b330eff2bb50333e2cd631e50bf703b4564bc62e9", 0x0}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu\xed\xe1?\xd1\x90\x93=c5W\xd1W\xfe\x01\x00#\xdax\xa8\t\x9buE\x81\x81\xaa\xa94B/F\x85D!\xa4\x85f\xe5\x02\xe0\xff\x00\x10\x00\xb2u%\x99\x895#\xf4\x16\x00\x00\x00\x00\x00\x88\x00'/78, 0x0, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="c103000000003c0000021fe4ac061417e0000001e55942f6465ec71d62c5ab12b04b2ade6a0c1596", 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
recvmsg(r3, &(0x7f0000009740)={&(0x7f0000009000)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009080)=""/141, 0x8d}, {&(0x7f0000009140)=""/171, 0xab}, {&(0x7f0000009200)=""/255, 0xff}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {&(0x7f0000009440)=""/155, 0x9b}, {&(0x7f0000009500)=""/30, 0x1e}, {&(0x7f0000009540)=""/140, 0x8c}], 0x8, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780)=r6)
r7 = socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(r7, 0x0, 0x40000)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x7)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:01:25 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000680), 0x0)

00:01:25 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, 0x0}, 0x1)

00:01:25 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

00:01:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617cf0627a985227e1b330eff2bb50333e2cd631e50bf703b4564bc62e9", 0x0}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu\xed\xe1?\xd1\x90\x93=c5W\xd1W\xfe\x01\x00#\xdax\xa8\t\x9buE\x81\x81\xaa\xa94B/F\x85D!\xa4\x85f\xe5\x02\xe0\xff\x00\x10\x00\xb2u%\x99\x895#\xf4\x16\x00\x00\x00\x00\x00\x88\x00'/78, 0x0, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="c103000000003c0000021fe4ac061417e0000001e55942f6465ec71d62c5ab12b04b2ade6a0c1596", 0x28}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
recvmsg(r3, &(0x7f0000009740)={&(0x7f0000009000)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009080)=""/141, 0x8d}, {&(0x7f0000009140)=""/171, 0xab}, {&(0x7f0000009200)=""/255, 0xff}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {&(0x7f0000009440)=""/155, 0x9b}, {&(0x7f0000009500)=""/30, 0x1e}, {&(0x7f0000009540)=""/140, 0x8c}], 0x8, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780)=r6)
r7 = socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(r7, 0x0, 0x40000)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x7)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:01:25 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe16, 0x240, 0x0, 0xffffffffffffffa0)

00:01:25 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))

00:01:26 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})

00:01:26 executing program 2:
socket$kcm(0x29, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0xfffffffffffffdf6, 0x0}, 0x30)

00:01:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
syz_read_part_table(0x0, 0x0, 0x0)

00:01:26 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, 0x0}, 0x1)

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
gettid()

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)

00:01:26 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)='^', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)='.', 0x1}], 0x1}, 0x0)

00:01:26 executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)
close(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0)

00:01:26 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})

00:01:26 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, 0x0}, 0x1)

00:01:26 executing program 5:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})

00:01:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x2000)=nil)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0xfffffffffffffc2d)

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)

00:01:26 executing program 0:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:26 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)}, 0x1)

00:01:26 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)

00:01:26 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})

00:01:26 executing program 2:
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef)

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x0, 0x0, 0x0)

00:01:26 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)}, 0x1)

[  640.699960] device nr0
 entered promiscuous mode
00:01:26 executing program 5:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0xfffffffffffffdf6, 0x0}, 0x30)

00:01:26 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:01:26 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9b, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x700, 0x297ef)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0), 0x4)

00:01:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'ip6tnl0\x00'}, 0x18)

00:01:27 executing program 5:
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000))
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  640.913331] device nr0
 entered promiscuous mode
00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500), 0x0, 0x0, 0x0)

00:01:27 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)}, 0x1)

00:01:27 executing program 2:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x0, 0x0, 0x0, 0xfeff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008151e00f80ecdb4cb904024865161a000700050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0)

00:01:27 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = timerfd_create(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

00:01:27 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r1)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
readv(r1, &(0x7f00000002c0), 0x17c)

00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)

00:01:27 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x1)

00:01:27 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d)
mkdir(0x0, 0x0)
close(r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

00:01:27 executing program 2:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x0, 0x0, 0x0, 0xfeff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)

00:01:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8000)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x5437, 0x0)

00:01:27 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000020000000000000000000000020000000000"], 0x0, 0x1a}, 0x20)

00:01:27 executing program 1:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x300]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
syz_open_pts(r3, 0x0)

00:01:27 executing program 5:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 0:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x0, 0x0, 0x0, 0xfeff, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 2:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x0, 0x0, 0x0, 0xfeff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0)

00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)

00:01:27 executing program 1:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2={0xff, 0x2, [0x300]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:27 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))

00:01:27 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0)

00:01:28 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x100002, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[])

00:01:28 executing program 1:

00:01:28 executing program 5:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:28 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)

00:01:28 executing program 0:
creat(0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5fe)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000380)={@local})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @mcast2, @loopback, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a02})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

00:01:28 executing program 2:

00:01:28 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

00:01:28 executing program 2:

00:01:28 executing program 0:

00:01:28 executing program 5:

00:01:28 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)

00:01:28 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000400)=@l2={0x1f, 0x81, {0x69, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x1, 0xfffffffffffffffe}, 0x80, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
sendmsg$kcm(r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)
openat$cgroup_int(r5, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0)
sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0)

00:01:28 executing program 2:

[  642.691503] device bridge_slave_1 left promiscuous mode
[  642.700920] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.750918] device bridge_slave_0 left promiscuous mode
[  642.756518] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.912026] device hsr_slave_1 left promiscuous mode
[  642.972955] device hsr_slave_0 left promiscuous mode
[  643.024632] team0 (unregistering): Port device team_slave_1 removed
[  643.034599] team0 (unregistering): Port device team_slave_0 removed
[  643.046672] bond0 (unregistering): Releasing backup interface bond_slave_1
[  643.093605] bond0 (unregistering): Releasing backup interface bond_slave_0
[  643.174817] bond0 (unregistering): Released all slaves
[  645.880336] IPVS: ftp: loaded support on port[0] = 21
[  646.371432] chnl_net:caif_netlink_parms(): no params data found
[  646.407847] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.414534] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.422097] device bridge_slave_0 entered promiscuous mode
[  646.428754] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.435288] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.442311] device bridge_slave_1 entered promiscuous mode
[  646.460525] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  646.469365] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  646.489158] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  646.496709] team0: Port device team_slave_0 added
[  646.502611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  646.509780] team0: Port device team_slave_1 added
[  646.515225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  646.522663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  646.592468] device hsr_slave_0 entered promiscuous mode
[  646.630502] device hsr_slave_1 entered promiscuous mode
[  646.670662] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  646.678832] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  646.691847] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.698227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.704952] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.711367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.740132] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  646.746268] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.754985] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  646.763810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  646.771346] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.778198] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.788036] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  646.794296] 8021q: adding VLAN 0 to HW filter on device team0
[  646.804197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  646.812054] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.818419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.828103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  646.836864] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.843272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.860992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  646.868734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  646.878014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  646.887931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  646.898790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  646.907936] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  646.914181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  646.928899] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  646.938934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.370921] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
00:01:34 executing program 1:

00:01:34 executing program 0:

00:01:34 executing program 2:

00:01:34 executing program 5:

00:01:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)

00:01:34 executing program 3:

00:01:34 executing program 0:

00:01:34 executing program 2:

00:01:34 executing program 1:

00:01:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

00:01:34 executing program 3:

00:01:34 executing program 0:

00:01:34 executing program 5:

00:01:34 executing program 2:

00:01:34 executing program 1:

00:01:34 executing program 5:

00:01:34 executing program 2:

00:01:34 executing program 3:

00:01:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)

00:01:34 executing program 0:

00:01:34 executing program 3:

00:01:34 executing program 1:

00:01:34 executing program 5:

00:01:34 executing program 2:

00:01:34 executing program 0:

00:01:34 executing program 3:

00:01:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

00:01:34 executing program 1:

00:01:34 executing program 5:
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:01:34 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f00000000c0))
fcntl$getownex(r0, 0x10, &(0x7f0000000000))

00:01:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00')
fstat(r0, &(0x7f0000000000))

00:01:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="13692544b9ca"], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:01:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

00:01:34 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e})
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL_GET(0x22)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
close(r0)
close(0xffffffffffffffff)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000140))

00:01:34 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)

00:01:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x8)

00:01:34 executing program 4:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:34 executing program 0:
r0 = gettid()
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
tkill(r0, 0x1c)
ptrace$cont(0x9, r1, 0x0, 0x5)

00:01:35 executing program 2:
clone(0x1000000000011, &(0x7f0000000000), 0x0, 0x0, 0x0)
r0 = getpgrp(0xffffffffffffffff)
waitid(0x2, r0, &(0x7f0000000000), 0x4, 0x0)

00:01:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup3(r1, r0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delroute={0x4c, 0x19, 0xe09c7c6303c351e9, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x9, 0x9954, 0x99}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

00:01:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0xa00000227e, &(0x7f0000fd3ffc))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x8, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r5 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="acf3", 0x2, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500)={r5, 0xfffffffffffffffb, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5})
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r7, 0x1000000000016)
mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x80)
r8 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4624a30350c7acf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)

00:01:35 executing program 4:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:35 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0x9e)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0x8}, 0x0)

00:01:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @empty}})

00:01:35 executing program 4:
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
dup3(r3, r1, 0x0)

00:01:35 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

00:01:35 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0xa00000227e, &(0x7f0000fd3ffc))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x8, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r5 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="acf3", 0x2, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500)={r5, 0xfffffffffffffffb, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="656e633d6f61657020686173683d786362632d6165732d63650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bccb1ca5edb660bfcb6eab0fd43fa3ca4cb7fcc63fce17ab9de2add3460c938c8842ea514e56ee7260a51f3a8de5197adf55cf71988654aba4bb28647727ea6d46f1d7e9ab1bb69a074ff80fc8e1b1ca53d94410a6446e813728e602ab59e442a577204706f7ac77c2961f6322279b9e1d2421b90bfa6db4c1647d593766e3037a25071c88c3a8bec894d06a796faaf2d54b3757ba2d8b2f839025d45384210ab32497300d94d10919d1223df6007b73f7"], 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5})
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r7, 0x1000000000016)
mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x80)
r8 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4624a30350c7acf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)

00:01:38 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}})

00:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:38 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

00:01:38 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x3, 0x2}, 0x10}}, 0x0)

00:01:38 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0xa00000227e, &(0x7f0000fd3ffc))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x8, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r5 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="acf3", 0x2, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500)={r5, 0xfffffffffffffffb, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5})
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r7, 0x1000000000016)
mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x80)
r8 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4624a30350c7acf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)

00:01:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
dup3(r3, r1, 0x0)

00:01:38 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))

00:01:38 executing program 4:
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:38 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0xa00000227e, &(0x7f0000fd3ffc))
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x8, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0)
fchdir(r2)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10080000, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xffffffff7ffffffa)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r5 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="acf3", 0x2, 0xfffffffffffffffc)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500)={r5, 0xfffffffffffffffb, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x5c62, 0x2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5})
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r7, 0x1000000000016)
mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x80)
r8 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4624a30350c7acf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)

00:01:38 executing program 2:
clone(0xd0000000, 0x0, 0x0, 0x0, 0x0)

00:01:38 executing program 5:

00:01:38 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x03\x00\x00\x00\x00\x00\x00\x00V\xdc\xc1\x9f\xbb\xb0w\xcb\x11\xd0x.\xda\xa6\x16U\xd2\x81\xdc\xe8\ra\xc4\xdf\x04I\x87\x7f\xb6\x17Fv\xdf', 0x0)
write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2)
fcntl$F_SET_RW_HINT(r0, 0x803, 0x0)

00:01:38 executing program 4:
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:38 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0)

00:01:38 executing program 4:
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100))

00:01:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2)
semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1)

00:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000063de2c)=ANY=[@ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x1}}, 0x0)

00:01:38 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0)

00:01:38 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

[  653.030480] IPVS: ftp: loaded support on port[0] = 21
00:01:39 executing program 2:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @ipv4}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x18c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback={0x2}}}}, 0x108)

00:01:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:39 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0)

00:01:39 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = dup2(r0, r0)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008050)

00:01:39 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:39 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x03\x00\x00\x00\x00\x00\x00\x00V\xdc\xc1\x9f\xbb\xb0w\xcb\x11\xd0x.\xda\xa6\x16U\xd2\x81\xdc\xe8\ra\xc4\xdf\x04I\x87\x7f\xb6\x17Fv\xdf', 0x0)
write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2)
fcntl$F_SET_RW_HINT(r0, 0x803, 0x0)

00:01:39 executing program 2:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:39 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0)

00:01:39 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:39 executing program 4:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000000)=""/124, 0x7c)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:39 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1, 0xffffffffffffffff)

00:01:39 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:39 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000000)=""/124, 0x7c)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:39 executing program 4:
r0 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000))

00:01:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:39 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000000)=""/124, 0x7c)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:39 executing program 0:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x15, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x522000000003, 0x11)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0x0)

00:01:39 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='/\xc2x\\\xabSCMYg5V\xd8igroup.sta\x9f\xd4t\x00+\x04J\x00\x0f\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eW\x7f\x14\xb2\xa3@\x15\xe2+\xf5\xc6\xde\xc66\x8dF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x0f\x00\x01\xd8?GB\xa4\x04\x17\x91\xe0\xfd<\xdc\x14\x03\xb1Y\xf3\xb9\x14H\xd0\xfb\x88Kru\xfb(\x93\x16\f9\xdb\xfa\xa0\xf0\x1e\xf5#\x0f\xf5\f\x0f\xc0\xff\xe8U\xda\x10\xc3\xd8\'\xf0\xda\xf7\f/q\xfb\xef\x05\xc6\x9e\x03\xd1yG\x1e\x10\xc9\xb3\x81\xccS\x1b\xeb\xf7*\x01\xede\x00\xe8\x8e\xa3Z@\xe3\xf8?\x11\xac\xadb\n?\xf2m\xa3\x9fyD\xbbh\xb2!\x88V\xa0.\xce\xab\xcd\x93\x9c\xd2\xc6E\x89r\r\x98\x96\x99\x01\x16', 0x2761, 0x0)

00:01:39 executing program 3:
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:39 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='/\xc2x\\\xabSCMYg5V\xd8igroup.sta\x9f\xd4t\x00+\x04J\x00\x0f\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eW\x7f\x14\xb2\xa3@\x15\xe2+\xf5\xc6\xde\xc66\x8dF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x0f\x00\x01\xd8?GB\xa4\x04\x17\x91\xe0\xfd<\xdc\x14\x03\xb1Y\xf3\xb9\x14H\xd0\xfb\x88Kru\xfb(\x93\x16\f9\xdb\xfa\xa0\xf0\x1e\xf5#\x0f\xf5\f\x0f\xc0\xff\xe8U\xda\x10\xc3\xd8\'\xf0\xda\xf7\f/q\xfb\xef\x05\xc6\x9e\x03\xd1yG\x1e\x10\xc9\xb3\x81\xccS\x1b\xeb\xf7*\x01\xede\x00\xe8\x8e\xa3Z@\xe3\xf8?\x11\xac\xadb\n?\xf2m\xa3\x9fyD\xbbh\xb2!\x88V\xa0.\xce\xab\xcd\x93\x9c\xd2\xc6E\x89r\r\x98\x96\x99\x01\x16', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e64000157720063e"], 0x8}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x8a, 0x0, &(0x7f0000000800)="38f8e8e61bd2d70dcd9f28d430ea6d8d1158df21e713fb2e2f9ffff3136f7ee086d2c53a973fcd332cb35acddcef0449d6ed4f41c528f6e1f238a9a46f7928790104000000000000d6581be27cb8d967bb13d5f90d9102434b58abe92cfe523d2bca049b4a9203b52f4e07c7ef01f1d3d1ec485c3ab5467d6891ddd2876f09a3bfee84768b62ad388104", 0x0}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xec\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d40), 0x4)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0}, 0x4000815)
openat$tun(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/net/tun\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f0000000400)}, 0x10)

00:01:39 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000000)=""/124, 0x7c)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:39 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 3:
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:40 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

00:01:40 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000000)=""/124, 0x7c)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

[  654.023659] device nr0
 entered promiscuous mode
00:01:40 executing program 3:
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:40 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x4a6, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f000000d2c0)={0x6, 0x0, 0x5, 0xf1f9, 0x24, 0xffffffffffffffff, 0x0, [], 0x0, r1}, 0x3c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)

00:01:40 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:40 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='/\xc2x\\\xabSCMYg5V\xd8igroup.sta\x9f\xd4t\x00+\x04J\x00\x0f\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eW\x7f\x14\xb2\xa3@\x15\xe2+\xf5\xc6\xde\xc66\x8dF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x0f\x00\x01\xd8?GB\xa4\x04\x17\x91\xe0\xfd<\xdc\x14\x03\xb1Y\xf3\xb9\x14H\xd0\xfb\x88Kru\xfb(\x93\x16\f9\xdb\xfa\xa0\xf0\x1e\xf5#\x0f\xf5\f\x0f\xc0\xff\xe8U\xda\x10\xc3\xd8\'\xf0\xda\xf7\f/q\xfb\xef\x05\xc6\x9e\x03\xd1yG\x1e\x10\xc9\xb3\x81\xccS\x1b\xeb\xf7*\x01\xede\x00\xe8\x8e\xa3Z@\xe3\xf8?\x11\xac\xadb\n?\xf2m\xa3\x9fyD\xbbh\xb2!\x88V\xa0.\xce\xab\xcd\x93\x9c\xd2\xc6E\x89r\r\x98\x96\x99\x01\x16', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e64000157720063e"], 0x8}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x8a, 0x0, &(0x7f0000000800)="38f8e8e61bd2d70dcd9f28d430ea6d8d1158df21e713fb2e2f9ffff3136f7ee086d2c53a973fcd332cb35acddcef0449d6ed4f41c528f6e1f238a9a46f7928790104000000000000d6581be27cb8d967bb13d5f90d9102434b58abe92cfe523d2bca049b4a9203b52f4e07c7ef01f1d3d1ec485c3ab5467d6891ddd2876f09a3bfee84768b62ad388104", 0x0}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xec\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d40), 0x4)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0}, 0x4000815)
openat$tun(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/net/tun\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f0000000400)}, 0x10)

00:01:40 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x4a6, 0x2a0, 0x0, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f000000d2c0)={0x6, 0x0, 0x5, 0xf1f9, 0x24, 0xffffffffffffffff, 0x0, [], 0x0, r1}, 0x3c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)

00:01:40 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

00:01:40 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:40 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:40 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

[  654.410624] device nr0
 entered promiscuous mode
00:01:40 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:40 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

00:01:40 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

00:01:40 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:40 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:40 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x2, 0x6, 0x0, &(0x7f0000002b80))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x3, 0x4}]})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000040)=0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0))
close(r0)

00:01:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='/\xc2x\\\xabSCMYg5V\xd8igroup.sta\x9f\xd4t\x00+\x04J\x00\x0f\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eW\x7f\x14\xb2\xa3@\x15\xe2+\xf5\xc6\xde\xc66\x8dF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x0f\x00\x01\xd8?GB\xa4\x04\x17\x91\xe0\xfd<\xdc\x14\x03\xb1Y\xf3\xb9\x14H\xd0\xfb\x88Kru\xfb(\x93\x16\f9\xdb\xfa\xa0\xf0\x1e\xf5#\x0f\xf5\f\x0f\xc0\xff\xe8U\xda\x10\xc3\xd8\'\xf0\xda\xf7\f/q\xfb\xef\x05\xc6\x9e\x03\xd1yG\x1e\x10\xc9\xb3\x81\xccS\x1b\xeb\xf7*\x01\xede\x00\xe8\x8e\xa3Z@\xe3\xf8?\x11\xac\xadb\n?\xf2m\xa3\x9fyD\xbbh\xb2!\x88V\xa0.\xce\xab\xcd\x93\x9c\xd2\xc6E\x89r\r\x98\x96\x99\x01\x16', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e64000157720063e"], 0x8}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x8a, 0x0, &(0x7f0000000800)="38f8e8e61bd2d70dcd9f28d430ea6d8d1158df21e713fb2e2f9ffff3136f7ee086d2c53a973fcd332cb35acddcef0449d6ed4f41c528f6e1f238a9a46f7928790104000000000000d6581be27cb8d967bb13d5f90d9102434b58abe92cfe523d2bca049b4a9203b52f4e07c7ef01f1d3d1ec485c3ab5467d6891ddd2876f09a3bfee84768b62ad388104", 0x0}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xec\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d40), 0x4)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0}, 0x4000815)
openat$tun(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/net/tun\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f0000000400)}, 0x10)

00:01:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x15, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x8}, 0x10)

00:01:40 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:40 executing program 3:
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:41 executing program 3:
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

[  654.954410] device nr0
 entered promiscuous mode
00:01:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:41 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x1ff)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

00:01:41 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:41 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x2000000016, 0x249e21, 0x100000001}, 0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), 0x0, 0x2}, 0x20)

00:01:41 executing program 3:
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:41 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:41 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0x2000000, @dev, @local}}}}, 0x0)

00:01:41 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x1ff)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

00:01:41 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x105, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

00:01:41 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x340)

00:01:41 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:41 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x340)

00:01:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000080)=0x1, 0x4)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)=0x45fd)
ftruncate(r5, 0x10099b7)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10)
sendfile(r4, r5, 0x0, 0xfffffffd)

00:01:41 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:41 executing program 4:

00:01:41 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:41 executing program 5:

00:01:41 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x340)

00:01:41 executing program 4:

00:01:41 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:42 executing program 5:

00:01:42 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x340)

00:01:42 executing program 4:

00:01:42 executing program 0:

00:01:42 executing program 4:

00:01:42 executing program 5:

00:01:42 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x340)

00:01:42 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:42 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:42 executing program 5:

00:01:42 executing program 4:

00:01:42 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x340)

00:01:42 executing program 0:

00:01:42 executing program 5:

00:01:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:42 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
getdents(r0, &(0x7f0000000ea9)=""/407, 0x197)

00:01:42 executing program 4:

00:01:42 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x240)

00:01:42 executing program 0:

00:01:42 executing program 5:

00:01:42 executing program 4:

00:01:43 executing program 0:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x240)

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 5:

00:01:43 executing program 4:

00:01:43 executing program 0:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x240)

00:01:43 executing program 5:

00:01:43 executing program 4:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(0xffffffffffffffff, &(0x7f0000000ea9)=""/407, 0x197)

00:01:43 executing program 5:

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:43 executing program 4:

00:01:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x1, 0x0, [{0x0, 0x0, 0x0}]})

00:01:43 executing program 5:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, 0x0, 0x0)

00:01:43 executing program 4:

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:43 executing program 4:

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 5:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, 0x0, 0x0)

00:01:43 executing program 0:

00:01:43 executing program 4:

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:43 executing program 0:

00:01:43 executing program 2:
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6')
getdents(r0, 0x0, 0x0)

00:01:43 executing program 5:

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 4:

00:01:43 executing program 5:

00:01:43 executing program 0:

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x270)

00:01:43 executing program 4:

00:01:43 executing program 2:

00:01:43 executing program 0:

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 5:

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x270)

00:01:43 executing program 0:

00:01:43 executing program 4:

00:01:43 executing program 2:

00:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2, [0x40000072]})

00:01:43 executing program 5:

00:01:43 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x270)

00:01:43 executing program 4:

00:01:43 executing program 0:

00:01:43 executing program 5:

00:01:44 executing program 2:

00:01:44 executing program 4:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:44 executing program 0:

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0)

00:01:44 executing program 5:

00:01:44 executing program 4:

00:01:44 executing program 2:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:44 executing program 0:

00:01:44 executing program 4:

00:01:44 executing program 5:

00:01:44 executing program 2:

00:01:44 executing program 0:

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0)

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0xa0, 0xa0, 0xd0, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x340)

00:01:44 executing program 4:

00:01:44 executing program 5:

00:01:44 executing program 2:

00:01:44 executing program 0:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x298, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x310)

00:01:44 executing program 4:

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0)

00:01:44 executing program 2:

00:01:44 executing program 5:

00:01:44 executing program 0:

00:01:44 executing program 4:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x2, [0x40000072]})

00:01:44 executing program 5:

00:01:44 executing program 2:

00:01:44 executing program 0:

00:01:44 executing program 5:

00:01:44 executing program 4:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:44 executing program 0:

00:01:44 executing program 2:

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x2, [0x40000072]})

00:01:44 executing program 5:

00:01:44 executing program 4:

00:01:44 executing program 0:

00:01:44 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:44 executing program 4:

00:01:44 executing program 2:

00:01:44 executing program 5:

00:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x2, [0x40000072]})

00:01:44 executing program 0:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:45 executing program 2:

00:01:45 executing program 5:

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2})

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 2:

00:01:45 executing program 5:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240)

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 5:

00:01:45 executing program 0:

00:01:45 executing program 2:

00:01:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2})

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240)

00:01:45 executing program 2:

00:01:45 executing program 5:

00:01:45 executing program 4:

00:01:45 executing program 0:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240)

00:01:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7f, 0x2})

00:01:45 executing program 0:

00:01:45 executing program 5:

00:01:45 executing program 4:

00:01:45 executing program 2:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:45 executing program 5:

00:01:45 executing program 2:

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 1:

00:01:45 executing program 5:

00:01:45 executing program 2:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 1:

00:01:45 executing program 5:

00:01:45 executing program 2:

00:01:45 executing program 0:

00:01:45 executing program 4:

00:01:45 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:45 executing program 5:

00:01:45 executing program 1:

00:01:46 executing program 4:

00:01:46 executing program 2:

00:01:46 executing program 0:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 1:

00:01:46 executing program 5:

00:01:46 executing program 0:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 4:

00:01:46 executing program 2:

00:01:46 executing program 5:

00:01:46 executing program 1:

00:01:46 executing program 0:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 2:

00:01:46 executing program 1:

00:01:46 executing program 4:

00:01:46 executing program 0:

00:01:46 executing program 5:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 2:

00:01:46 executing program 0:

00:01:46 executing program 4:

00:01:46 executing program 5:

00:01:46 executing program 1:

00:01:46 executing program 5:

00:01:46 executing program 2:

00:01:46 executing program 4:

00:01:46 executing program 0:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 1:

00:01:46 executing program 5:

00:01:46 executing program 4:

00:01:46 executing program 0:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:46 executing program 2:

00:01:46 executing program 1:

00:01:46 executing program 5:

00:01:46 executing program 4:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)

00:01:46 executing program 1:

00:01:46 executing program 0:

00:01:46 executing program 2:

00:01:46 executing program 5:

00:01:46 executing program 1:

00:01:46 executing program 4:

00:01:46 executing program 0:

00:01:46 executing program 2:

00:01:46 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)

00:01:46 executing program 5:

00:01:46 executing program 0:

00:01:46 executing program 4:

00:01:46 executing program 1:

00:01:46 executing program 2:

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)

00:01:47 executing program 5:

00:01:47 executing program 0:

00:01:47 executing program 0:

00:01:47 executing program 4:

00:01:47 executing program 2:

00:01:47 executing program 1:

00:01:47 executing program 5:

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:47 executing program 2:

00:01:47 executing program 1:

00:01:47 executing program 4:

00:01:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000001c0)={0x0, 0x0})

00:01:47 executing program 5:

00:01:47 executing program 1:

00:01:47 executing program 2:

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:47 executing program 5:

00:01:47 executing program 0:

00:01:47 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})

00:01:47 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f000000a5c0))

00:01:47 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x268, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xd0, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2e0)

00:01:47 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000084)

00:01:47 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x80ffff}, [@ldst={0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

00:01:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000140))

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xa0, 0xd8, 0x108, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2b0)

00:01:47 executing program 4:
r0 = socket$inet(0x2, 0x80000000003, 0x1c)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x6)
ioctl$TCSETAF(r1, 0x5423, &(0x7f0000000100))

00:01:47 executing program 0:
r0 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000001300)=0x80, 0x3)
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000140))

00:01:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:47 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind(r0, &(0x7f00000001c0)=@un=@abs, 0x80)

00:01:47 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x280)

00:01:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@multicast2=0xe0000003, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff80}}}, 0xb8}}, 0x0)

00:01:47 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x280)

00:01:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:47 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)

00:01:47 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:48 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x280)

00:01:48 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@multicast2=0xe0000003, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff80}}}, 0xb8}}, 0x0)

00:01:48 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x278)

00:01:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000))

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x278)

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:48 executing program 5:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys\t\x00\x00\x00/ipv4/vs/cache_bypass\x00', 0x2, 0x0)

00:01:48 executing program 2:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x278)

00:01:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)

00:01:48 executing program 3:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0xa0, 0xa0, 0xd0, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x278)

00:01:48 executing program 2:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:48 executing program 0:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 0:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

00:01:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x1}})

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:48 executing program 2:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:48 executing program 0:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x801, 0x0)
accept(r0, 0x0, 0x0)

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:48 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:48 executing program 3:
fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/49)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00')

00:01:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:48 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:49 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:49 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

00:01:49 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:49 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000000c0))

00:01:49 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:49 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:49 executing program 5:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:49 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000000)={{0x1}})

00:01:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xfffffffffffffffe)

00:01:49 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

00:01:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:49 executing program 5:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0xa}, [@ldst={0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

00:01:49 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:49 executing program 2:
r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)='posix_acl_accessbdev\x00')

00:01:50 executing program 5:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:50 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
accept(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x0)

00:01:50 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:50 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:50 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:50 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:50 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

[  664.120999] device bridge_slave_1 left promiscuous mode
[  664.136497] bridge0: port 2(bridge_slave_1) entered disabled state
00:01:50 executing program 0:
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[], 0x0)
getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x0)

00:01:50 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:50 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

[  664.233267] device bridge_slave_0 left promiscuous mode
[  664.257438] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.484740] device hsr_slave_1 left promiscuous mode
[  664.548564] device hsr_slave_0 left promiscuous mode
[  664.604279] team0 (unregistering): Port device team_slave_1 removed
[  664.623898] team0 (unregistering): Port device team_slave_0 removed
[  664.643724] bond0 (unregistering): Releasing backup interface bond_slave_1
[  664.703739] bond0 (unregistering): Releasing backup interface bond_slave_0
[  664.799035] bond0 (unregistering): Released all slaves
[  665.697075] audit: type=1400 audit(1555977711.783:174): avc:  denied  { map } for  pid=29820 comm="syz-executor.3" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13812 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  667.400420] IPVS: ftp: loaded support on port[0] = 21
[  667.799705] chnl_net:caif_netlink_parms(): no params data found
[  667.844585] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.852389] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.860811] device bridge_slave_0 entered promiscuous mode
[  667.868471] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.877752] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.886508] device bridge_slave_1 entered promiscuous mode
[  667.907943] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  667.919261] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  667.942058] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  667.950928] team0: Port device team_slave_0 added
[  667.957004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  667.965166] team0: Port device team_slave_1 added
[  667.971781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  667.981087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  668.034406] device hsr_slave_0 entered promiscuous mode
[  668.091380] device hsr_slave_1 entered promiscuous mode
[  668.130992] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  668.140708] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  668.160401] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.170436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.177165] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.183814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.218911] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  668.225777] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.236312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  668.246420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  668.254904] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.263488] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.274761] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  668.282684] 8021q: adding VLAN 0 to HW filter on device team0
[  668.295077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  668.304157] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.311432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.330945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  668.339696] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.346826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.355036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  668.364315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  668.375352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  668.391470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  668.401658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  668.412580] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  668.419613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  668.435447] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  668.448935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.791292] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
00:01:55 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

00:01:55 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:55 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:55 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:55 executing program 0:
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)=ANY=[], 0x0)
getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x0)

00:01:55 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:55 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0)

00:01:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:55 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x6, 0xc, 0x0, 0xfffffffffffffffe)

00:01:55 executing program 2:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:55 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0})

00:01:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040))

00:01:56 executing program 2:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

[  670.000170] protocol 88fb is buggy, dev hsr_slave_0
[  670.005832] protocol 88fb is buggy, dev hsr_slave_1
00:01:56 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0)

00:01:56 executing program 2:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140))

00:01:56 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, 0x0)

00:01:56 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0)

00:01:56 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:56 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:56 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, 0x0)

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, 0x0)

00:01:56 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:56 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:56 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xffe)

00:01:56 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:56 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:56 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:56 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:56 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:56 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

[  670.920562] audit: type=1400 audit(1555977717.003:175): avc:  denied  { map } for  pid=29942 comm="syz-executor.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=132979 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1
00:01:57 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2)

00:01:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:01:57 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:57 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, 0x0, 0x0, 0x2)

00:01:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 5:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(0x0, 0x0, 0x0)

00:01:57 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:57 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, 0x0, 0x0, 0x2)

00:01:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, 0x0, 0x0, 0x2)

00:01:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(0x0, 0x0, 0x0)

00:01:57 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x2)

00:01:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(0x0, 0x0, 0x0)

00:01:57 executing program 5:
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:57 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:01:57 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:57 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:57 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x2)

00:01:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000), 0x0, 0x0)

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x2)

00:01:58 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:58 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000), 0x0, 0x0)

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x2)

00:01:58 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

[  672.080187] protocol 88fb is buggy, dev hsr_slave_0
[  672.085417] protocol 88fb is buggy, dev hsr_slave_1
00:01:58 executing program 5:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:01:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000), 0x0, 0x0)

00:01:58 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x2)

00:01:58 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:58 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:01:58 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x2)

00:01:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:58 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x2)

00:01:58 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:01:58 executing program 0:
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, 0x0)
syz_open_pts(r0, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

00:01:58 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:58 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x2)

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x2)

00:01:58 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x5452, &(0x7f0000000000)={{0x1}})

00:01:58 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)

00:01:58 executing program 0:

00:01:58 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x0)

00:01:59 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:01:59 executing program 0:

00:01:59 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, 0x0)

00:01:59 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:59 executing program 4:

00:01:59 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x0)

00:01:59 executing program 0:

00:01:59 executing program 4:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

00:01:59 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:59 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, 0x0)

00:01:59 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x0)

00:01:59 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:01:59 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:01:59 executing program 5:

00:01:59 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, 0x0)

00:01:59 executing program 2:

00:01:59 executing program 5:

00:01:59 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000))

00:01:59 executing program 2:

00:01:59 executing program 4:

00:01:59 executing program 5:

00:01:59 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000))

00:01:59 executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:02:00 executing program 5:

00:02:00 executing program 4:

00:02:00 executing program 2:

00:02:00 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000000))

00:02:00 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:02:00 executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:02:00 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:02:00 executing program 5:

00:02:00 executing program 2:

00:02:00 executing program 3:

00:02:00 executing program 2:

00:02:00 executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0)

00:02:00 executing program 5:

00:02:00 executing program 3:

00:02:00 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, 0x0, 0x0)

00:02:00 executing program 2:

00:02:00 executing program 0:

00:02:00 executing program 3:

00:02:00 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:02:00 executing program 5:

00:02:00 executing program 2:

00:02:00 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, 0x0, 0x0)

00:02:00 executing program 0:

00:02:00 executing program 3:

00:02:00 executing program 0:

00:02:00 executing program 2:

00:02:00 executing program 3:

00:02:00 executing program 5:

00:02:00 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, 0x0, 0x0)

00:02:00 executing program 5:

00:02:01 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x141)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000000200))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

00:02:01 executing program 0:

00:02:01 executing program 2:

00:02:01 executing program 3:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

00:02:01 executing program 5:

00:02:01 executing program 2:

00:02:01 executing program 3:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

00:02:01 executing program 0:

00:02:01 executing program 5:

00:02:01 executing program 5:

00:02:01 executing program 4:

00:02:01 executing program 3:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

00:02:01 executing program 0:

00:02:01 executing program 2:

00:02:01 executing program 5:

00:02:01 executing program 3:

00:02:01 executing program 2:

00:02:01 executing program 5:

00:02:01 executing program 0:

00:02:01 executing program 4:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

00:02:01 executing program 2:

00:02:01 executing program 3:

00:02:01 executing program 0:

00:02:01 executing program 5:

00:02:01 executing program 4:

00:02:01 executing program 3:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

00:02:01 executing program 4:

00:02:01 executing program 0:

00:02:01 executing program 5:

00:02:01 executing program 2:

00:02:01 executing program 4:

00:02:01 executing program 2:

00:02:01 executing program 0:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

00:02:01 executing program 5:

00:02:01 executing program 3:

00:02:01 executing program 0:

00:02:01 executing program 4:

00:02:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14}, 0x14}}, 0x0)

00:02:01 executing program 5:

00:02:01 executing program 2:

00:02:01 executing program 3:

00:02:01 executing program 4:

00:02:01 executing program 0:

00:02:02 executing program 5:

00:02:02 executing program 3:

00:02:02 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14}, 0x14}}, 0x0)

00:02:02 executing program 2:

00:02:02 executing program 4:

00:02:02 executing program 0:

00:02:02 executing program 5:

00:02:02 executing program 3:

00:02:02 executing program 0:

00:02:02 executing program 2:

00:02:02 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getsadinfo={0x14}, 0x14}}, 0x0)

00:02:02 executing program 5:

00:02:02 executing program 4:

00:02:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1000, 0x0, 0x400000000000000, 0x5, 0x0, 0x0, 0xffffffffffffff7f, 0x32b, 0x38, 0x326, 0x523, 0x5, 0x20, 0x2, 0xe, 0x0, 0xfffffffffffffe3d}, [{0x70000000, 0x65, 0x4, 0xfffffffffffffff3, 0x2, 0x0, 0x6, 0x8}, {0x7, 0x9, 0xfffffffffffffffc, 0x1, 0x0, 0x6, 0x8000000000, 0x80000000}], "3df331cfdf4e220ddafcd6fdd90155a24e07ae73434255e88629449a556a834b9a15e547d3244e3ffd72477d04eda40f542b3e6eac3fe6ec4eed9e25859f9a554f9c58bcd2593061135f7b0a8ad74bbdd857624a7902251f14193bb746d0836376242a2d678e6edcdc34570eed475eddd64e333d5d7e7c145d35b12705124e2b131475b465b01be433a6649edb69854e8a381c7be704b2", [[], []]}, 0x30f)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
sendfile(r2, r2, &(0x7f00000000c0), 0xfdef)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080))

00:02:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x0)

00:02:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xc5)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")

00:02:02 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x0)

00:02:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x0, 0x400000000000000, 0x5, 0x0, 0x0, 0x0, 0x32b, 0x38, 0x326, 0x523, 0x5, 0x20, 0x2, 0xe}, [{0x70000000, 0x65, 0x4, 0xfffffffffffffff3, 0x2, 0x0, 0x6}], "3df331cfdf4e220ddafcd6fdd90155a24e07ae73434255e88629449a556a834b9a15e547d3244e3ffd72477d04eda40f542b3e6eac3fe6ec4eed9e25859f9a554f9c58bcd2593061135f7b0a8ad74bbdd857624a7902251f14193bb746d0836376242a2d678e6edcdc34570eed475eddd64e333d5d7e7c145d35b12705124e2b131475b465b01be433a6649edb69854e8a381c7be704b2", [[], []]}, 0x2ef)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)
sendfile(r1, r1, &(0x7f0000000100), 0xe08c)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x40000003, 0x31, 0xffffffffffffffff, 0x0)

00:02:02 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, 0x0)

00:02:02 executing program 1:
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

00:02:02 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
request_key(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0xfffffffffffffffe)

00:02:02 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0)

00:02:02 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
getdents64(r0, &(0x7f0000000240)=""/159, 0x9f)

00:02:02 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto(0xffffffffffffffff, &(0x7f0000000200)="ce", 0x1, 0x20004004, 0x0, 0x0)

00:02:02 executing program 3:
mknod(&(0x7f0000000040)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x20000000000b04, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
open(&(0x7f0000000080)='./bus\x00', 0x80001, 0x0)

00:02:02 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
eventfd(0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r2, 0x0, 0xfffffffffffffeaa, 0x8)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11})
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/195)

00:02:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x0)

00:02:03 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz'}, 0x0, 0xfffffffffffffffe)

00:02:03 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x0)

00:02:03 executing program 3:
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
eventfd2(0x0, 0x7)

00:02:03 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20004004, 0x0, 0x0)

00:02:03 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
eventfd(0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r2, 0x0, 0xfffffffffffffeaa, 0x8)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11})
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/195)

00:02:03 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x34000000}, 0x0)

00:02:03 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
eventfd(0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
vmsplice(r2, 0x0, 0xfffffffffffffeaa, 0x8)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11})
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/195)

00:02:03 executing program 1:
pipe2(&(0x7f0000000000), 0x800)

00:02:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
read(r2, &(0x7f00000019c0)=""/100, 0xfdef)

00:02:03 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
dup2(r1, r0)

00:02:03 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1, 0x0)

00:02:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000002004, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x35)
wait4(0x0, 0x0, 0x0, 0x0)

00:02:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r0, 0x88d82)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0)
write(r2, &(0x7f0000000000), 0xffffff86)

00:02:04 executing program 4:
mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0)
clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0)
execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)

00:02:04 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:04 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1, 0x0)

00:02:04 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x17fe, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0)
r1 = dup2(r0, r0)
write$P9_RWALK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="90"], 0x1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
tee(r2, r1, 0x33a11cb6, 0x0)
tee(r1, r2, 0x3, 0x0)

00:02:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

00:02:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
write(r2, &(0x7f00000000c0)='\a', 0x1)
recvmmsg(r0, &(0x7f0000001000), 0x3fffffffffffefe, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

00:02:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x321, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x3c}}, 0x0)

00:02:04 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:04 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x17fe, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0)
r1 = dup2(r0, r0)
write$P9_RWALK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="90"], 0x1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0)
tee(r2, r1, 0x33a11cb6, 0x0)
tee(r1, r2, 0x3, 0x0)

00:02:04 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/loop-control\x00')
unshare(0x20600)
prctl$PR_GET_TIMERSLACK(0x1e)
link(0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
geteuid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000040)="59a96ec322d1c8197274ef88c9aa34", 0xf)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000000c0))
setuid(0x0)
getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0)
write$UHID_CREATE(r6, 0x0, 0x0)

00:02:04 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000001440)='/dev/snd/timer\x00', 0x0, 0x0)
ppoll(&(0x7f0000000600)=[{r0}], 0x1, &(0x7f0000000640)={0x0, 0x1c9c380}, 0x0, 0x0)

00:02:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
eventfd(0x6)
vmsplice(0xffffffffffffffff, 0x0, 0xfffffffffffffeaa, 0x8)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11})
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/195)

00:02:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000080)='\x8e\x1a,\x7f\x00\xabN\xa2\xb2\x1fG\tlv\x85\xa3\x87\x98s\x13h\xa4\xdd\xd5q\xb4rih0Iq\xf9d0\xe1`\xb4{Z\x9f\xb2\xc2\xeco\xda`\xccZJ\xcc\xbd\f\x8eE\xce\xf1]\r\xc0\x91\xe7c\xc4?\xd0\xdc\xed\xc3x%&\r\xeb\xbd\x96C\xce\xb1\x1a\x87\x91\x0e\x1cta\x15\xbb\x1f\x9e\xe5\xb5/z\xe4\x7fc\xef\xf4\x89\x8c+\xed\\\xce6U\xe0\xf9\x8f\x1d\x9f\xad\xf7\xf2b7s\xdb\x8d\xae\xa3\xe9\xbf\x1f\xf5\x98\x1b\x88d\x9ds\b\xcf\x9a\x1b\x86\xc7\x06|$\xe8G8?^\xcel\x88', 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x552f, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"})

00:02:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:02:05 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/loop-control\x00')
unshare(0x20600)
prctl$PR_GET_TIMERSLACK(0x1e)
link(0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
geteuid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000040)="59a96ec322d1c8197274ef88c9aa34", 0xf)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000000c0))
setuid(0x0)
getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0)
write$UHID_CREATE(r6, 0x0, 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
dup2(r1, r0)

00:02:05 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00')
getdents(r0, &(0x7f0000000200)=""/4096, 0x1000)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 1:
mknod(&(0x7f0000000040)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x20000000000b04, 0x0)
vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="95", 0x1}], 0x1, 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
clock_nanosleep(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000240))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ccf96200", 0x4, 0x0, 0x0, 0x0)
close(r0)

00:02:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/loop-control\x00')
unshare(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
link(0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
geteuid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000040)="59a96ec322d1c8197274ef88c9aa34", 0xf)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000000c0))
setuid(0x0)
getrandom(0x0, 0x0, 0x3)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0)
write$UHID_CREATE(r6, 0x0, 0x0)

00:02:05 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:05 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x321, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x3c}}, 0x0)

00:02:05 executing program 1:
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

00:02:05 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:05 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:06 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)='/dev/loop-control\x00')
unshare(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
link(0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
geteuid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000040)="59a96ec322d1c8197274ef88c9aa34", 0xf)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000000c0))
setuid(0x0)
getrandom(0x0, 0x0, 0x3)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0)
write$UHID_CREATE(r6, 0x0, 0x0)

00:02:06 executing program 0:
fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0xd, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x7, 0x0, "3dd98777b1e9014204034a1758c05b4c"}, 0x15, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8400fffffffe)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3)

00:02:06 executing program 1:
clone(0x8000000000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x0, 0x0)

00:02:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:06 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:06 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:06 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:06 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:08 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

00:02:08 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:08 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc3f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000100)=[@acquire, @acquire], 0x0, 0x0, 0x0})

00:02:08 executing program 0:
fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0xd, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x7, 0x0, "3dd98777b1e9014204034a1758c05b4c"}, 0x15, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8400fffffffe)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3)

00:02:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:09 executing program 1:
fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0xd, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x7, 0x0, "3dd98777b1e9014204034a1758c05b4c"}, 0x15, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8400fffffffe)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3)

[  682.912017] binder: 30612:30616 Acquire 1 refcount change on invalid ref 0 ret -22
[  682.922404] binder: 30612:30616 Acquire 1 refcount change on invalid ref 0 ret -22
00:02:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:09 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:09 executing program 0:
fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0xd, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x7, 0x0, "3dd98777b1e9014204034a1758c05b4c"}, 0x15, 0x0)
r0 = socket$inet6(0xa, 0x401000000801, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x8400fffffffe)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3)

00:02:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x0, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:12 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:12 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x0, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

00:02:12 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6)
getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x347)

00:02:12 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000001300)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

00:02:12 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ppoll(&(0x7f0000000540)=[{r1}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x0, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:12 executing program 1:
ioctl(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0)
mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0)

00:02:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:12 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000401190300"/20], 0x14}}, 0x0)

00:02:15 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

00:02:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:15 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
setns(r1, 0x0)

00:02:15 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:15 executing program 0:

00:02:15 executing program 0:

00:02:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:15 executing program 1:

00:02:15 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:15 executing program 0:

00:02:15 executing program 1:

00:02:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

00:02:15 executing program 0:

00:02:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:15 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:15 executing program 1:

00:02:15 executing program 0:

00:02:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:15 executing program 4:

00:02:18 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:18 executing program 0:

00:02:18 executing program 4:

00:02:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:18 executing program 1:

00:02:18 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:18 executing program 1:

00:02:18 executing program 4:

00:02:18 executing program 0:

00:02:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:18 executing program 0:

00:02:18 executing program 4:

00:02:21 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:21 executing program 1:

00:02:21 executing program 0:

00:02:21 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:21 executing program 4:

00:02:21 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:21 executing program 0:

00:02:21 executing program 4:

00:02:21 executing program 1:

00:02:21 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:21 executing program 4:

00:02:21 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffffe, 0x0)

00:02:24 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:24 executing program 1:
r0 = socket$unix(0x1, 0x10000000000002, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8)

00:02:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000301ffffff7f00000000000002000000e90211c5b034c8f37218e8f9b28c454098f342c37b75e7d3e664cce47ff8f638065c94f3d553f50297faa72fcc60d08d58705f830970341629a37e5ac6474dc0857d028b5792493c04de4bc7e94dcc1c562bf418c69280ff435b2988e02d3e1df35d210c966022a9f293cc85bdebe94c94b73cf1ed3782b561295679b3d9d74d67ae3d6955dd0c72402484f0d7b8e36b332c4f41e2dc1bfa24ca108a2dda4c34ff9bf4d6adf42bb5b11f01130165ad0f5dc1b5dad075d9b3082a13a1edca6ff83d73e12b07a15ea2a6a2062873576c2d9834ff482600374a94fa02302ad26e34f93858e0aab7b59ef4e3ec5318ef312cde9bc34f09632984ccb023e81abf892cec55e44dcad2711eaa094b19980127ec6ec8d812cdc8d66c1be69b106031dd1db72f290376126a4d26f5d5d2338cc730e9c568d59082f8344048a7fbf524380c09f0600800c24c72d48b79a452b0fd3564bbc05d2fec9003c1a927189577e7992569bdce0ecd384e80e702cebc054fa5cb7459781e47490b2f6842054b6b4f054709f70a072a1fa64d218d89f379d91fc59a12d6eb0e0279ea0a2a08237d27d156fa45c2add84add84b70ad121b71833400cc0dbe4f2308a84afff4f17235ed1fc7a9c535c8f33e5fe9bdfa3ec376920657ffbd44d3b3007cae7d65eff31b6923146176f69bc767bbad8bccd9c1e5d1407acc5e8996f663369cabf99442784053c497124fc4c3adc8ee98c7107c50fe0551e3bbf15af82624a96232c961c5066c758066dfece25727317b65173efa8acee84758795d311ebe9c2edad3aa749daa771310ea8bcfd49a755cedb0d823575e55029d91aa3704e4cb473ea752c29f6046da38d7d4bcefef24d3cc605053faa14dad822b107e6a073a425"], 0x28f}}, 0x0)

00:02:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10)

00:02:24 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:24 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0x100000078)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0x0, 0xffffffffffffff51, 0x0, 0x0, 0x4d9})

00:02:24 executing program 0:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$nl_xfrm(0x10, 0x3, 0x6)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0)
syz_genetlink_get_family_id$tipc2(0x0)

00:02:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:24 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0x100000078)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0x0, 0xffffffffffffff51, 0x0, 0x0, 0x4d9})
creat(&(0x7f0000000140)='./bus\x00', 0x0)

00:02:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:27 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000004294d9700000000735e08c77dc3c7c3a172b1fc8c39de75"], 0x20}}], 0x1, 0x0)

00:02:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a8c9512d7703f319bd070")
r1 = socket$inet6(0xa, 0x100800000000002, 0x0)
sendmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x1}], 0x1, 0x0)

00:02:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319b")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:27 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:27 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1a)
unlink(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000040)='./file1\x00', 0x0)
clone(0x100000001000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)

00:02:27 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:27 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0xfffffffffffffffc})

00:02:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319b")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:27 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000001300)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)

00:02:27 executing program 1:
sigaltstack(&(0x7f00005aa000/0xa000)=nil, 0x0)
madvise(&(0x7f0000242000/0x600000)=nil, 0x600000, 0x8)

00:02:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319b")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:27 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0)

00:02:27 executing program 1:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000880)="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", 0x781}], 0x1, 0x0)

00:02:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd0")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="0d04060cbbe7e3db", 0x8}], 0x1}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]})

[  701.715773] audit: type=1804 audit(1555977747.803:176): pid=30864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir665013364/syzkaller.FyPdai/398/bus" dev="sda1" ino=18093 res=1
[  701.765328] audit: type=1804 audit(1555977747.853:177): pid=30866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir665013364/syzkaller.FyPdai/398/bus" dev="sda1" ino=18093 res=1
[  701.796315] audit: type=1804 audit(1555977747.853:178): pid=30839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir580887337/syzkaller.TcY1ou/453/file1" dev="sda1" ino=18142 res=1
00:02:30 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:30 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2102)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3fe)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd0")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:30 executing program 0:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
unshare(0x60000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000100)=0x10001)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x6000}, {r0, 0x3}], 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

00:02:30 executing program 4:
r0 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2e)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r1, 0x0, 0x0)

00:02:30 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd0")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9)
read(r0, &(0x7f0000000140)=""/11, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280))
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r1, r0})
r3 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)

00:02:30 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:30 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  704.419288] IPv6: : Disabled Multicast RS
00:02:30 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

[  705.100202] IPVS: ftp: loaded support on port[0] = 21
00:02:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0)
mlock(&(0x7f0000000000/0x8000)=nil, 0x8000)

00:02:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:31 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:31 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9)
read(r0, &(0x7f0000000140)=""/11, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280))
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r1, r0})
r3 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)

00:02:31 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  705.400587] audit: type=1804 audit(1555977751.493:179): pid=30931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir665013364/syzkaller.FyPdai/400/bus" dev="sda1" ino=17041 res=1
00:02:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

00:02:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a5017ead7279f601", 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0xc080)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)

[  705.435853] audit: type=1804 audit(1555977751.523:180): pid=30935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir665013364/syzkaller.FyPdai/400/bus" dev="sda1" ino=17041 res=1
[  705.470710] audit: type=1804 audit(1555977751.553:181): pid=30935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir665013364/syzkaller.FyPdai/400/bus" dev="sda1" ino=17041 res=1
00:02:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:33 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a5017ead7279f601", 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005)

00:02:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9)
read(r0, &(0x7f0000000140)=""/11, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280))
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000000)={r1, r0})
r3 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)

00:02:33 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:33 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:33 executing program 0:
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

00:02:33 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123cda3f319bd070")
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)

00:02:33 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:33 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:33 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c)
chroot(&(0x7f0000000000)='./file0\x00')
bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x20000000, 0x0, 0x711000, 0x0}, 0x2c)

00:02:33 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

[  707.617477] SELinux: security policydb version 16 (MLS) not backwards compatible
[  707.629823] SELinux: failed to load policy
[  707.677888] SELinux: security policydb version 16 (MLS) not backwards compatible
[  707.686027] SELinux: failed to load policy
00:02:34 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:34 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:02:34 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:34 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x802123001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  708.372259] SELinux: security policydb version 16 (MLS) not backwards compatible
[  708.390328] FAT-fs (loop0): bogus number of reserved sectors
[  708.397615] SELinux: failed to load policy
[  708.403851] FAT-fs (loop0): Can't find a valid FAT filesystem
[  708.474426] FAT-fs (loop0): bogus number of reserved sectors
[  708.481172] FAT-fs (loop0): Can't find a valid FAT filesystem
00:02:36 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:36 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:36 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

00:02:36 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="9e", 0x1)

00:02:36 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000000000000ffd, 0x2000000000071, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "282f577ef67b404a3c0f0064b251bbb554d655875d00003bf4368330d0e02144312908d761073a2beb98bb4b02000000000000000afc6bfde38c46e8c1cd9e80", "50ac216e4814c5a1626715181bfc48c2f56485f6020000003da9e66649ec4569"})

00:02:36 executing program 5:
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

[  710.611719] SELinux: security policydb version 16 (MLS) not backwards compatible
[  710.624651] SELinux: failed to load policy
00:02:36 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:36 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

00:02:36 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='.\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070")
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')

00:02:36 executing program 5:
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:39 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:39 executing program 5:
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:39 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:39 executing program 1:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:02:39 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='.\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070")
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')

00:02:39 executing program 2:
epoll_create1(0x0)
r0 = epoll_create1(0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r0}, {r1, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d96927940000fffffff8000040000059a0e29c47735d77fd"], 0x2c)

00:02:39 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:39 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:39 executing program 1:
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, 0x0)

00:02:39 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

[  713.670401] SELinux: ebitmap: map size 1493172288 does not match my size 64 (high bit was 1201463968)
[  713.685343] SELinux: failed to load policy
00:02:39 executing program 2:
epoll_create1(0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:42 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0x13e, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x108, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "2e7c1df3f2f4acbb4ace6e8a50565b595591e78d9b12245a598496ea23d4c406af9f3b4a3f009159f9ac1555e4477ff94d4d50913843082ace4419eb0e79f826c9d383e2310e60b0b49f7a2d305f00945c1f774a8da5fb8f04988ee9e082d4f9070955ff1bbd44d6fdb144e01f9f2e5ee65ccc71338ca0a50652cb6b5ae30e0fce110b555945fa43cebd22a399d6a33dea3af82460a33f5a491976018b1b56dd512d481061c6bb980d69bccee5352b18539b08b6ac9e0116f524316e8c9c036ecc70932c"}}}}}}}, 0x0)

00:02:42 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:42 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:42 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:42 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='.\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070")
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')

00:02:42 executing program 5:
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:42 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:42 executing program 5:
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x7b8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)="7837db6a59f408d79926085ab9b5ae10cc479979eb4a1d85f492749617", 0x0}, 0x18)
openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)}], 0x1}, 0x0)
r4 = socket$kcm(0xa, 0x100000000005, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
recvmsg(0xffffffffffffffff, &(0x7f0000009740)={0x0, 0x0, &(0x7f0000009600)=[{0x0}, {&(0x7f0000009300)=""/85, 0x55}, {&(0x7f0000009380)=""/138, 0x8a}, {0x0}, {&(0x7f0000009500)=""/30, 0x1e}], 0x5, &(0x7f0000009680)=""/150, 0x96}, 0x10000)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000009780))
socket$kcm(0xa, 0x0, 0x11)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40000)
r5 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0)

00:02:42 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:42 executing program 5:
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff80000"], 0x20)

00:02:45 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:45 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, 0x0, 0x0)

00:02:45 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:45 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='.\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070")
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0)
unlink(&(0x7f0000000080)='./file0\x00')

00:02:45 executing program 1:
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001540)="2e000000110081aee405d10200000e00fa076b000800000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000280))
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef)

00:02:45 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  719.689081] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  719.709611] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  719.716599] CPU: 0 PID: 31145 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  719.732974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  719.742345] Call Trace:
[  719.742369]  dump_stack+0x138/0x19c
[  719.742386]  warn_alloc.cold+0x96/0x1af
[  719.742396]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  719.742409]  ? lock_downgrade+0x6e0/0x6e0
[  719.742430]  ? avc_has_perm+0x2df/0x4b0
[  719.742453]  __vmalloc_node_range+0x3be/0x6a0
[  719.742467]  ? trace_hardirqs_on+0x10/0x10
[  719.742480]  vmalloc+0x46/0x50
[  719.742493]  ? sel_write_load+0x1a0/0x1050
[  719.742504]  sel_write_load+0x1a0/0x1050
[  719.742515]  ? save_trace+0x290/0x290
[  719.742531]  ? sel_read_bool+0x240/0x240
[  719.742544]  ? trace_hardirqs_on+0x10/0x10
[  719.742556]  ? save_trace+0x290/0x290
[  719.742575]  __vfs_write+0x107/0x6c0
[  719.742591]  ? __lock_is_held+0xb6/0x140
[  719.757766]  ? sel_read_bool+0x240/0x240
[  719.757783]  ? kernel_read+0x120/0x120
[  719.757797]  ? __lock_is_held+0xb6/0x140
[  719.757813]  ? check_preemption_disabled+0x3c/0x250
[  719.757841]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  719.782260]  ? rcu_read_lock_sched_held+0x110/0x130
00:02:45 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  719.782272]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  719.782284]  ? __sb_start_write+0x153/0x2f0
[  719.782300]  vfs_write+0x198/0x500
[  719.782315]  SyS_write+0xb8/0x180
[  719.782337]  ? SyS_read+0x180/0x180
[  719.782350]  ? do_syscall_64+0x53/0x630
[  719.782362]  ? SyS_read+0x180/0x180
[  719.782374]  do_syscall_64+0x1eb/0x630
[  719.782384]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  719.782403]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  719.782420] RIP: 0033:0x458c29
00:02:45 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  719.794417] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  719.794431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  719.794441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  719.810267] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  719.810275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  719.810281] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
[  719.820777] Mem-Info:
[  719.894811] active_anon:97682 inactive_anon:191 isolated_anon:0
00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  719.894811]  active_file:8943 inactive_file:16729 isolated_file:0
[  719.894811]  unevictable:0 dirty:1063 writeback:0 unstable:0
[  719.894811]  slab_reclaimable:15457 slab_unreclaimable:102610
[  719.894811]  mapped:58892 shmem:239 pagetables:1312 bounce:0
[  719.894811]  free:1292907 free_pcp:185 free_cma:0
00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  719.999408] Node 0 active_anon:390928kB inactive_anon:764kB active_file:35632kB inactive_file:69116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235668kB dirty:6452kB writeback:0kB shmem:956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 96256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  720.053586] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  720.086402] device nr0
 entered promiscuous mode
00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  720.089176] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  720.172535] lowmem_reserve[]: 0 2580 2580 2580
[  720.177368] Node 0 DMA32 free:1359452kB min:36468kB low:45584kB high:54700kB active_anon:391020kB inactive_anon:764kB active_file:35632kB inactive_file:76616kB unevictable:0kB writepending:13960kB present:3129332kB managed:2644920kB mlocked:0kB kernel_stack:8000kB pagetables:5344kB bounce:0kB free_pcp:708kB local_pcp:248kB free_cma:0kB
[  720.215105] lowmem_reserve[]: 0 0 0 0
[  720.219098] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  720.245650] lowmem_reserve[]: 0 0 0 0
00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  720.249632] Node 1 Normal free:3785152kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  720.289097] lowmem_reserve[]: 0 0 0 0
[  720.306584] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[  720.320546] Node 0 DMA32: 2*4kB (UE) 927*8kB (ME) 2289*16kB (UME) 2317*32kB (UME) 2329*64kB (UME) 850*128kB (UME) 348*256kB (UME) 229*512kB (UME) 103*1024kB (UM) 64*2048kB (UM) 131*4096kB (UM) = 1355504kB
[  720.339688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  720.352076] Node 1 Normal: 60*4kB (UE) 336*8kB (UME) 255*16kB (UME) 63*32kB (UM) 18*64kB (UM) 10*128kB (U) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785152kB
[  720.418874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  720.434104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  720.444829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  720.457394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  720.467687] 25160 total pagecache pages
[  720.475394] 0 pages in swap cache
[  720.478975] Swap cache stats: add 0, delete 0, find 0/0
[  720.486266] Free swap  = 0kB
[  720.504947] Total swap = 0kB
[  720.508019] 1965979 pages RAM
[  720.511597] 0 pages HighMem/MovableOnly
[  720.515615] 333220 pages reserved
00:02:46 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, 0x0, 0x0)

00:02:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

00:02:46 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='cgroup.events\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001040)=r1)
r2 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d)
close(r2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

00:02:46 executing program 1:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0x33e)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000)

00:02:46 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  720.519066] 0 pages cma reserved
00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

00:02:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, 0x0, 0x0, 0x0)

00:02:46 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\xff', 0x241, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x03', 0x6d000)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xb615b567eea2bb2d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

00:02:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  720.614350] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
00:02:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, 0x0})
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

[  720.673025] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  720.704858] CPU: 1 PID: 31198 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  720.711944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  720.721422] Call Trace:
[  720.724035]  dump_stack+0x138/0x19c
[  720.727682]  warn_alloc.cold+0x96/0x1af
[  720.731676]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  720.736567]  ? lock_downgrade+0x6e0/0x6e0
[  720.740792]  ? avc_has_perm+0x2df/0x4b0
[  720.744802]  __vmalloc_node_range+0x3be/0x6a0
[  720.750535]  ? trace_hardirqs_on+0x10/0x10
[  720.754793]  vmalloc+0x46/0x50
[  720.758005]  ? sel_write_load+0x1a0/0x1050
[  720.762255]  sel_write_load+0x1a0/0x1050
[  720.766345]  ? save_trace+0x290/0x290
[  720.770160]  ? sel_read_bool+0x240/0x240
[  720.774231]  ? trace_hardirqs_on+0x10/0x10
[  720.779986]  ? save_trace+0x290/0x290
[  720.783798]  __vfs_write+0x107/0x6c0
[  720.787601]  ? __lock_is_held+0xb6/0x140
[  720.791666]  ? sel_read_bool+0x240/0x240
[  720.796272]  ? kernel_read+0x120/0x120
[  720.800161]  ? __lock_is_held+0xb6/0x140
[  720.804221]  ? check_preemption_disabled+0x3c/0x250
[  720.809251]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  720.814719]  ? rcu_read_lock_sched_held+0x110/0x130
[  720.819756]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  720.824512]  ? __sb_start_write+0x153/0x2f0
[  720.828842]  vfs_write+0x198/0x500
[  720.832393]  SyS_write+0xb8/0x180
[  720.835847]  ? SyS_read+0x180/0x180
[  720.839477]  ? do_syscall_64+0x53/0x630
[  720.843466]  ? SyS_read+0x180/0x180
[  720.847114]  do_syscall_64+0x1eb/0x630
[  720.851011]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  720.855877]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  720.861072] RIP: 0033:0x458c29
[  720.864268] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  720.871982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  720.879274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  720.886660] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  720.893938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  720.901213] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
[  720.923653] Mem-Info:
[  720.928408] active_anon:99937 inactive_anon:266 isolated_anon:0
[  720.928408]  active_file:8943 inactive_file:15912 isolated_file:0
[  720.928408]  unevictable:0 dirty:252 writeback:0 unstable:0
[  720.928408]  slab_reclaimable:15645 slab_unreclaimable:103185
[  720.928408]  mapped:58898 shmem:339 pagetables:1412 bounce:0
[  720.928408]  free:1290323 free_pcp:253 free_cma:0
00:02:47 executing program 3:
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  720.963691] Node 0 active_anon:399692kB inactive_anon:1064kB active_file:35632kB inactive_file:63648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235592kB dirty:1008kB writeback:0kB shmem:1356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 100352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  720.995108] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  721.036013] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  721.067996] lowmem_reserve[]: 0 2580 2580 2580
[  721.072909] Node 0 DMA32 free:1365456kB min:36468kB low:45584kB high:54700kB active_anon:395456kB inactive_anon:1164kB active_file:35632kB inactive_file:63648kB unevictable:0kB writepending:1008kB present:3129332kB managed:2644920kB mlocked:0kB kernel_stack:7776kB pagetables:5440kB bounce:0kB free_pcp:1120kB local_pcp:708kB free_cma:0kB
[  721.103242] lowmem_reserve[]: 0 0 0 0
[  721.107162] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  721.132955] lowmem_reserve[]: 0 0 0 0
[  721.136882] Node 1 Normal free:3785152kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  721.164624] lowmem_reserve[]: 0 0 0 0
[  721.168632] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[  721.182661] Node 0 DMA32: 1529*4kB (UM) 2164*8kB (UME) 2345*16kB (UME) 2245*32kB (UME) 2331*64kB (UME) 850*128kB (UME) 348*256kB (UME) 229*512kB (UME) 103*1024kB (UM) 62*2048kB (UM) 131*4096kB (UM) = 1366132kB
[  721.201647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  721.212475] Node 1 Normal: 60*4kB (UE) 336*8kB (UME) 255*16kB (UME) 63*32kB (UM) 18*64kB (UM) 10*128kB (U) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785152kB
[  721.229754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  721.238686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  721.247494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  721.256420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  721.265104] 25213 total pagecache pages
[  721.269487] 0 pages in swap cache
[  721.273011] Swap cache stats: add 0, delete 0, find 0/0
[  721.278490] Free swap  = 0kB
[  721.281640] Total swap = 0kB
00:02:47 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, 0x0, 0x0)

00:02:47 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:47 executing program 3:
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:47 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)

[  721.284668] 1965979 pages RAM
[  721.287764] 0 pages HighMem/MovableOnly
[  721.291870] 333220 pages reserved
[  721.295317] 0 pages cma reserved
[  721.345541] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  721.357590] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  721.363952] CPU: 0 PID: 31228 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  721.370998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  721.380370] Call Trace:
[  721.382975]  dump_stack+0x138/0x19c
[  721.386626]  warn_alloc.cold+0x96/0x1af
[  721.390611]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  721.395469]  ? lock_downgrade+0x6e0/0x6e0
[  721.399647]  ? avc_has_perm+0x2df/0x4b0
[  721.403638]  __vmalloc_node_range+0x3be/0x6a0
[  721.408233]  ? trace_hardirqs_on+0x10/0x10
[  721.412529]  vmalloc+0x46/0x50
[  721.415748]  ? sel_write_load+0x1a0/0x1050
[  721.419995]  sel_write_load+0x1a0/0x1050
[  721.424074]  ? save_trace+0x290/0x290
[  721.427891]  ? sel_read_bool+0x240/0x240
[  721.431965]  ? trace_hardirqs_on+0x10/0x10
[  721.436214]  ? save_trace+0x290/0x290
[  721.440055]  __vfs_write+0x107/0x6c0
[  721.443993]  ? __lock_is_held+0xb6/0x140
[  721.448066]  ? sel_read_bool+0x240/0x240
[  721.452182]  ? kernel_read+0x120/0x120
[  721.456069]  ? __lock_is_held+0xb6/0x140
[  721.460155]  ? check_preemption_disabled+0x3c/0x250
[  721.465195]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  721.470651]  ? rcu_read_lock_sched_held+0x110/0x130
[  721.475667]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  721.480432]  ? __sb_start_write+0x153/0x2f0
[  721.484764]  vfs_write+0x198/0x500
[  721.488350]  SyS_write+0xb8/0x180
[  721.491815]  ? SyS_read+0x180/0x180
[  721.495449]  ? do_syscall_64+0x53/0x630
[  721.499428]  ? SyS_read+0x180/0x180
[  721.503069]  do_syscall_64+0x1eb/0x630
[  721.507052]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  721.511915]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  721.517113] RIP: 0033:0x458c29
[  721.520304] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  721.528010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  721.535276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
00:02:47 executing program 3:
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:47 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:47 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f00000000c0)=0x80, 0x12)

[  721.542536] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  721.549806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  721.557066] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
00:02:47 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:47 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[], 0x0)

00:02:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x277, 0x0, 0xc0000101], [0xc2]})

00:02:47 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:47 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  721.720968] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  721.754006] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  721.789924] CPU: 0 PID: 31247 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  721.797006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  721.799918] kvm_set_msr_common: 2 callbacks suppressed
[  721.799928] kvm [31246]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
[  721.806562] Call Trace:
[  721.806598]  dump_stack+0x138/0x19c
[  721.806617]  warn_alloc.cold+0x96/0x1af
[  721.806628]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  721.806643]  ? lock_downgrade+0x6e0/0x6e0
[  721.806662]  ? avc_has_perm+0x2df/0x4b0
[  721.806682]  __vmalloc_node_range+0x3be/0x6a0
[  721.806695]  ? trace_hardirqs_on+0x10/0x10
[  721.806709]  vmalloc+0x46/0x50
[  721.806723]  ? sel_write_load+0x1a0/0x1050
[  721.806736]  sel_write_load+0x1a0/0x1050
[  721.806750]  ? save_trace+0x290/0x290
[  721.806767]  ? sel_read_bool+0x240/0x240
[  721.806778]  ? trace_hardirqs_on+0x10/0x10
[  721.806795]  ? save_trace+0x290/0x290
[  721.820337]  __vfs_write+0x107/0x6c0
[  721.820353]  ? __lock_is_held+0xb6/0x140
[  721.820366]  ? sel_read_bool+0x240/0x240
[  721.820376]  ? kernel_read+0x120/0x120
[  721.820385]  ? __lock_is_held+0xb6/0x140
[  721.820397]  ? check_preemption_disabled+0x3c/0x250
[  721.820413]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  721.820427]  ? rcu_read_lock_sched_held+0x110/0x130
[  721.820438]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  721.820457]  ? __sb_start_write+0x153/0x2f0
[  721.826679]  vfs_write+0x198/0x500
[  721.826695]  SyS_write+0xb8/0x180
[  721.826719]  ? SyS_read+0x180/0x180
[  721.826739]  ? do_syscall_64+0x53/0x630
[  721.938393]  ? SyS_read+0x180/0x180
[  721.942033]  do_syscall_64+0x1eb/0x630
[  721.945922]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  721.950771]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  721.956055] RIP: 0033:0x458c29
[  721.959240] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  721.966985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  721.974267] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  721.981548] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  721.988844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  721.996121] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
00:02:48 executing program 1:
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:02:48 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  722.067695] warn_alloc_show_mem: 1 callbacks suppressed
[  722.067701] Mem-Info:
[  722.101369] active_anon:98401 inactive_anon:299 isolated_anon:0
[  722.101369]  active_file:8943 inactive_file:15930 isolated_file:0
00:02:48 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x6, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)

00:02:48 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  722.101369]  unevictable:0 dirty:298 writeback:0 unstable:0
[  722.101369]  slab_reclaimable:15686 slab_unreclaimable:103108
[  722.101369]  mapped:58898 shmem:348 pagetables:1391 bounce:0
[  722.101369]  free:1291927 free_pcp:289 free_cma:0
[  722.176806] Node 0 active_anon:395856kB inactive_anon:1196kB active_file:35632kB inactive_file:63720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235592kB dirty:1192kB writeback:0kB shmem:1392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 106496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
00:02:48 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  722.219270] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  722.247131] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  722.266684] hfsplus: unable to find HFS+ superblock
[  722.308019] lowmem_reserve[]: 0 2580 2580 2580
[  722.312942] Node 0 DMA32 free:1353176kB min:36468kB low:45584kB high:54700kB active_anon:400124kB inactive_anon:1196kB active_file:35632kB inactive_file:63720kB unevictable:0kB writepending:1192kB present:3129332kB managed:2644920kB mlocked:0kB kernel_stack:8000kB pagetables:5860kB bounce:0kB free_pcp:768kB local_pcp:348kB free_cma:0kB
[  722.351664] lowmem_reserve[]: 0 0 0 0
[  722.360999] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  722.397914] lowmem_reserve[]: 0 0 0 0
[  722.406375] Node 1 Normal free:3785152kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  722.439350] lowmem_reserve[]: 0 0 0 0
[  722.443880] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
00:02:48 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:48 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:48 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  722.475517] Node 0 DMA32: 1597*4kB (UME) 4646*8kB (UME) 2801*16kB (UME) 2611*32kB (UME) 2332*64kB (UME) 839*128kB (UME) 222*256kB (UME) 166*512kB (UME) 102*1024kB (UM) 56*2048kB (UM) 131*4096kB (UM) = 1326100kB
[  722.484204] hfsplus: unable to find HFS+ superblock
[  722.499570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  722.540125] Node 1 Normal: 60*4kB (UE) 336*8kB (UME) 255*16kB (UME) 63*32kB (UM) 18*64kB (UM) 10*128kB (U) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785152kB
[  722.561776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  722.570932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  722.579700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  722.589759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  722.598922] 25221 total pagecache pages
[  722.603105] 0 pages in swap cache
[  722.606596] Swap cache stats: add 0, delete 0, find 0/0
[  722.625233] Free swap  = 0kB
[  722.628787] Total swap = 0kB
[  722.631955] 1965979 pages RAM
[  722.635067] 0 pages HighMem/MovableOnly
00:02:48 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[], 0x0)

00:02:48 executing program 1:
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:02:48 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:48 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  722.639047] 333220 pages reserved
[  722.642747] 0 pages cma reserved
00:02:48 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:48 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  722.714003] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  722.721949] hfsplus: unable to find HFS+ superblock
[  722.739799] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  722.748247] CPU: 1 PID: 31299 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  722.755302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  722.764676] Call Trace:
[  722.767290]  dump_stack+0x138/0x19c
[  722.770946]  warn_alloc.cold+0x96/0x1af
[  722.776496]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  722.781359]  ? lock_downgrade+0x6e0/0x6e0
[  722.785533]  ? avc_has_perm+0x2df/0x4b0
[  722.789551]  __vmalloc_node_range+0x3be/0x6a0
[  722.794050]  ? trace_hardirqs_on+0x10/0x10
[  722.798406]  vmalloc+0x46/0x50
[  722.801671]  ? sel_write_load+0x1a0/0x1050
[  722.805913]  sel_write_load+0x1a0/0x1050
[  722.809970]  ? save_trace+0x290/0x290
[  722.814006]  ? sel_read_bool+0x240/0x240
[  722.818070]  ? trace_hardirqs_on+0x10/0x10
[  722.822324]  ? save_trace+0x290/0x290
[  722.826115]  __vfs_write+0x107/0x6c0
[  722.829841]  ? __lock_is_held+0xb6/0x140
[  722.833894]  ? sel_read_bool+0x240/0x240
[  722.837953]  ? kernel_read+0x120/0x120
[  722.841832]  ? __lock_is_held+0xb6/0x140
[  722.845882]  ? check_preemption_disabled+0x3c/0x250
[  722.850891]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  722.856373]  ? rcu_read_lock_sched_held+0x110/0x130
[  722.861399]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  722.866150]  ? __sb_start_write+0x153/0x2f0
[  722.870462]  vfs_write+0x198/0x500
[  722.873990]  SyS_write+0xb8/0x180
[  722.877453]  ? SyS_read+0x180/0x180
[  722.881085]  ? do_syscall_64+0x53/0x630
[  722.885266]  ? SyS_read+0x180/0x180
[  722.889068]  do_syscall_64+0x1eb/0x630
[  722.892954]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  722.897794]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  722.902972] RIP: 0033:0x458c29
[  722.906143] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  722.913847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  722.921125] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  722.928392] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  722.935667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  722.942928] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
00:02:49 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[], 0x0)

00:02:49 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:49 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  723.165697] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  723.176357] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  723.182834] CPU: 0 PID: 31317 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  723.189879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  723.199351] Call Trace:
[  723.201962]  dump_stack+0x138/0x19c
[  723.205615]  warn_alloc.cold+0x96/0x1af
[  723.209599]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  723.214533]  ? lock_downgrade+0x6e0/0x6e0
[  723.218677]  ? avc_has_perm+0x2df/0x4b0
[  723.222646]  __vmalloc_node_range+0x3be/0x6a0
[  723.227137]  ? trace_hardirqs_on+0x10/0x10
[  723.231586]  vmalloc+0x46/0x50
[  723.234782]  ? sel_write_load+0x1a0/0x1050
[  723.239201]  sel_write_load+0x1a0/0x1050
[  723.243280]  ? save_trace+0x290/0x290
[  723.247097]  ? sel_read_bool+0x240/0x240
[  723.251158]  ? trace_hardirqs_on+0x10/0x10
[  723.255405]  ? save_trace+0x290/0x290
[  723.259197]  __vfs_write+0x107/0x6c0
[  723.262917]  ? __lock_is_held+0xb6/0x140
[  723.266995]  ? sel_read_bool+0x240/0x240
[  723.271046]  ? kernel_read+0x120/0x120
[  723.275006]  ? __lock_is_held+0xb6/0x140
[  723.279054]  ? check_preemption_disabled+0x3c/0x250
[  723.284061]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  723.289500]  ? rcu_read_lock_sched_held+0x110/0x130
[  723.294507]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  723.299367]  ? __sb_start_write+0x153/0x2f0
[  723.303684]  vfs_write+0x198/0x500
[  723.307245]  SyS_write+0xb8/0x180
[  723.310708]  ? SyS_read+0x180/0x180
[  723.314326]  ? do_syscall_64+0x53/0x630
[  723.318294]  ? SyS_read+0x180/0x180
[  723.321907]  do_syscall_64+0x1eb/0x630
[  723.325876]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  723.330720]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  723.335915] RIP: 0033:0x458c29
[  723.339114] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  723.346812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  723.354069] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  723.361334] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  723.368623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  723.375914] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
[  723.385075] warn_alloc_show_mem: 1 callbacks suppressed
[  723.385079] Mem-Info:
[  723.393090] active_anon:98561 inactive_anon:300 isolated_anon:0
[  723.393090]  active_file:8943 inactive_file:15947 isolated_file:0
[  723.393090]  unevictable:0 dirty:319 writeback:0 unstable:0
[  723.393090]  slab_reclaimable:14937 slab_unreclaimable:114549
00:02:49 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:49 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:49 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000001c0)=0x44)

00:02:49 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:49 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  723.393090]  mapped:58891 shmem:348 pagetables:1415 bounce:0
[  723.393090]  free:1281042 free_pcp:281 free_cma:0
[  723.427192] Node 0 active_anon:390048kB inactive_anon:1200kB active_file:35632kB inactive_file:63800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235564kB dirty:1288kB writeback:0kB shmem:1392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 100352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
00:02:49 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:49 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  723.513262] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
00:02:49 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  723.566661] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  723.598432] lowmem_reserve[]: 0 2580 2580 2580
00:02:49 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  723.606484] Node 0 DMA32 free:1319628kB min:36468kB low:45584kB high:54700kB active_anon:396624kB inactive_anon:1200kB active_file:35632kB inactive_file:63800kB unevictable:0kB writepending:1288kB present:3129332kB managed:2644920kB mlocked:0kB kernel_stack:7936kB pagetables:5996kB bounce:0kB free_pcp:924kB local_pcp:464kB free_cma:0kB
[  723.644403] lowmem_reserve[]: 0 0 0 0
[  723.648484] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  723.714280] lowmem_reserve[]: 0 0 0 0
[  723.718589] Node 1 Normal free:3785152kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  723.757986] lowmem_reserve[]: 0 0 0 0
[  723.767418] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[  723.785055] Node 0 DMA32: 1973*4kB (UME) 5279*8kB (UME) 3795*16kB (UME) 3360*32kB (UME) 2337*64kB (UME) 841*128kB (UME) 221*256kB (ME) 165*512kB (ME) 61*1024kB (M) 49*2048kB (UM) 131*4096kB (UM) = 1316028kB
[  723.805221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  723.816406] Node 1 Normal: 60*4kB (UE) 336*8kB (UME) 255*16kB (UME) 63*32kB (UM) 18*64kB (UM) 10*128kB (U) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785152kB
[  723.840310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  723.849377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
00:02:50 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)

00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:50 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  723.859537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  723.868858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  723.877887] 25242 total pagecache pages
[  723.881999] 0 pages in swap cache
[  723.885465] Swap cache stats: add 0, delete 0, find 0/0
[  723.890952] Free swap  = 0kB
[  723.893971] Total swap = 0kB
[  723.893980] 1965979 pages RAM
[  723.900186] 0 pages HighMem/MovableOnly
[  723.900191] 333220 pages reserved
[  723.900196] 0 pages cma reserved
[  723.950154] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  723.961237] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  723.966872] CPU: 0 PID: 31350 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  723.973990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  723.983557] Call Trace:
[  723.983597]  dump_stack+0x138/0x19c
[  723.983617]  warn_alloc.cold+0x96/0x1af
[  723.983629]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  723.983644]  ? lock_downgrade+0x6e0/0x6e0
[  723.983666]  ? avc_has_perm+0x2df/0x4b0
[  723.983686]  __vmalloc_node_range+0x3be/0x6a0
[  723.983701]  ? trace_hardirqs_on+0x10/0x10
[  723.983715]  vmalloc+0x46/0x50
[  723.983726]  ? sel_write_load+0x1a0/0x1050
[  723.983736]  sel_write_load+0x1a0/0x1050
[  723.983749]  ? save_trace+0x290/0x290
[  723.983764]  ? sel_read_bool+0x240/0x240
[  723.983777]  ? trace_hardirqs_on+0x10/0x10
[  723.983790]  ? save_trace+0x290/0x290
[  723.983806]  __vfs_write+0x107/0x6c0
[  723.983816]  ? __lock_is_held+0xb6/0x140
[  723.983827]  ? sel_read_bool+0x240/0x240
[  723.983847]  ? kernel_read+0x120/0x120
[  723.983858]  ? __lock_is_held+0xb6/0x140
[  723.983871]  ? check_preemption_disabled+0x3c/0x250
[  723.983887]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  723.983905]  ? rcu_read_lock_sched_held+0x110/0x130
[  724.011765]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  724.011779]  ? __sb_start_write+0x153/0x2f0
[  724.087884]  vfs_write+0x198/0x500
[  724.091426]  SyS_write+0xb8/0x180
[  724.094866]  ? SyS_read+0x180/0x180
[  724.098566]  ? do_syscall_64+0x53/0x630
[  724.102548]  ? SyS_read+0x180/0x180
[  724.106174]  do_syscall_64+0x1eb/0x630
[  724.110236]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  724.115280]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  724.120610] RIP: 0033:0x458c29
[  724.123891] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  724.131698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  724.139045] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  724.146407] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  724.153678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  724.160954] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
00:02:50 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:50 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x00\x06\x00\x11\x00')

00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:50 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:50 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)

[  724.357689] audit: type=1400 audit(1555977770.443:182): avc:  denied  { ioctl } for  pid=31354 comm="syz-executor.1" path="socket:[138128]" dev="sockfs" ino=138128 ioctlcmd=0x89a1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  724.375708] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  724.409540] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  724.417379] CPU: 0 PID: 31364 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  724.424432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  724.433802] Call Trace:
[  724.436421]  dump_stack+0x138/0x19c
[  724.440062]  warn_alloc.cold+0x96/0x1af
[  724.444058]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  724.448954]  ? lock_downgrade+0x6e0/0x6e0
[  724.453120]  ? avc_has_perm+0x2df/0x4b0
00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

[  724.457117]  __vmalloc_node_range+0x3be/0x6a0
[  724.461633]  ? trace_hardirqs_on+0x10/0x10
[  724.465885]  vmalloc+0x46/0x50
[  724.469193]  ? sel_write_load+0x1a0/0x1050
[  724.473443]  sel_write_load+0x1a0/0x1050
[  724.477540]  ? save_trace+0x290/0x290
[  724.481363]  ? sel_read_bool+0x240/0x240
[  724.485442]  ? trace_hardirqs_on+0x10/0x10
[  724.489688]  ? save_trace+0x290/0x290
[  724.493508]  __vfs_write+0x107/0x6c0
[  724.497233]  ? __lock_is_held+0xb6/0x140
[  724.501310]  ? sel_read_bool+0x240/0x240
00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

[  724.505535]  ? kernel_read+0x120/0x120
[  724.509519]  ? __lock_is_held+0xb6/0x140
[  724.513610]  ? check_preemption_disabled+0x3c/0x250
[  724.518667]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  724.524129]  ? rcu_read_lock_sched_held+0x110/0x130
[  724.529155]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  724.533919]  ? __sb_start_write+0x153/0x2f0
[  724.538246]  vfs_write+0x198/0x500
[  724.541814]  SyS_write+0xb8/0x180
[  724.545343]  ? SyS_read+0x180/0x180
[  724.548988]  ? do_syscall_64+0x53/0x630
[  724.553003]  ? SyS_read+0x180/0x180
[  724.556715]  do_syscall_64+0x1eb/0x630
[  724.560602]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  724.565454]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  724.570642] RIP: 0033:0x458c29
[  724.573830] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  724.581542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  724.588816] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  724.596103] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
00:02:50 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:50 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  724.603461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  724.610729] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
[  724.676864] warn_alloc_show_mem: 1 callbacks suppressed
[  724.676870] Mem-Info:
[  724.696074] active_anon:98722 inactive_anon:300 isolated_anon:0
[  724.696074]  active_file:8943 inactive_file:15958 isolated_file:0
[  724.696074]  unevictable:0 dirty:333 writeback:0 unstable:0
[  724.696074]  slab_reclaimable:14937 slab_unreclaimable:114656
[  724.696074]  mapped:58917 shmem:348 pagetables:1487 bounce:0
[  724.696074]  free:1280543 free_pcp:326 free_cma:0
[  724.731515] Node 0 active_anon:394888kB inactive_anon:1200kB active_file:35632kB inactive_file:63832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235668kB dirty:1332kB writeback:0kB shmem:1392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 98304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  724.777047] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  724.803268] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  724.829627] lowmem_reserve[]: 0 2580 2580 2580
[  724.835725] Node 0 DMA32 free:1317636kB min:36468kB low:45584kB high:54700kB active_anon:396884kB inactive_anon:1200kB active_file:35632kB inactive_file:63848kB unevictable:0kB writepending:1348kB present:3129332kB managed:2644920kB mlocked:0kB kernel_stack:7872kB pagetables:5968kB bounce:0kB free_pcp:1360kB local_pcp:696kB free_cma:0kB
[  724.870752] lowmem_reserve[]: 0 0 0 0
[  724.874689] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  724.901753] lowmem_reserve[]: 0 0 0 0
[  724.905605] Node 1 Normal free:3785152kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  724.933628] lowmem_reserve[]: 0 0 0 0
[  724.937464] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[  724.951181] Node 0 DMA32: 2001*4kB (UME) 5041*8kB (UME) 3846*16kB (UME) 3376*32kB (UME) 2338*64kB (UME) 842*128kB (UME) 221*256kB (ME) 165*512kB (ME) 61*1024kB (M) 52*2048kB (UM) 131*4096kB (UM) = 1321900kB
[  724.970973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  724.981888] Node 1 Normal: 60*4kB (UE) 336*8kB (UME) 255*16kB (UME) 63*32kB (UM) 18*64kB (UM) 10*128kB (U) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785152kB
[  724.999122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  725.008404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  725.017108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  725.026019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  725.035766] 25254 total pagecache pages
[  725.039753] 0 pages in swap cache
[  725.043430] Swap cache stats: add 0, delete 0, find 0/0
[  725.048800] Free swap  = 0kB
[  725.051891] Total swap = 0kB
[  725.054920] 1965979 pages RAM
[  725.058021] 0 pages HighMem/MovableOnly
[  725.062099] 333220 pages reserved
[  725.065553] 0 pages cma reserved
00:02:51 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:51 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:51 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ad41f123c123f319bd070")
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x3c)

00:02:51 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:51 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)

00:02:51 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:51 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  725.207699] syz-executor.5: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  725.241494] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[  725.256275] CPU: 1 PID: 31394 Comm: syz-executor.5 Not tainted 4.14.113 #3
[  725.263359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  725.272820] Call Trace:
[  725.275440]  dump_stack+0x138/0x19c
[  725.279101]  warn_alloc.cold+0x96/0x1af
[  725.283125]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  725.287986]  ? lock_downgrade+0x6e0/0x6e0
[  725.292264]  ? avc_has_perm+0x2df/0x4b0
[  725.296274]  __vmalloc_node_range+0x3be/0x6a0
[  725.300799]  ? trace_hardirqs_on+0x10/0x10
[  725.305050]  vmalloc+0x46/0x50
[  725.308299]  ? sel_write_load+0x1a0/0x1050
[  725.312564]  sel_write_load+0x1a0/0x1050
[  725.316731]  ? save_trace+0x290/0x290
[  725.320560]  ? sel_read_bool+0x240/0x240
[  725.324641]  ? trace_hardirqs_on+0x10/0x10
[  725.328890]  ? save_trace+0x290/0x290
[  725.332796]  __vfs_write+0x107/0x6c0
[  725.336526]  ? __lock_is_held+0xb6/0x140
[  725.340606]  ? sel_read_bool+0x240/0x240
[  725.344678]  ? kernel_read+0x120/0x120
[  725.348577]  ? __lock_is_held+0xb6/0x140
[  725.352653]  ? check_preemption_disabled+0x3c/0x250
00:02:51 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:51 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x2dd)

[  725.357684]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  725.363154]  ? rcu_read_lock_sched_held+0x110/0x130
[  725.368184]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  725.372980]  ? __sb_start_write+0x153/0x2f0
[  725.377326]  vfs_write+0x198/0x500
[  725.377341]  SyS_write+0xb8/0x180
[  725.377358]  ? SyS_read+0x180/0x180
[  725.388091]  ? do_syscall_64+0x53/0x630
[  725.392098]  ? SyS_read+0x180/0x180
[  725.395741]  do_syscall_64+0x1eb/0x630
[  725.399637]  ? trace_hardirqs_off_thunk+0x1a/0x1c
00:02:51 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:51 executing program 1:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'rose0\x00', 'veth1_to_bridge\x00', 'team_sl\x00\r\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', @link_local, [], @broadcast, [], 0x70, 0xa8, 0xd8}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'vlan0\x00', @remote, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x280)

[  725.404509]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  725.409711] RIP: 0033:0x458c29
[  725.412911] RSP: 002b:00007ff678231c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  725.420636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  725.427919] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  725.435195] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  725.442481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6782326d4
[  725.449767] R13: 00000000004c8777 R14: 00000000004def48 R15: 00000000ffffffff
00:02:52 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:52 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:52 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:52 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10)

00:02:52 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=000400000000000000d'])

00:02:52 executing program 0:
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  726.121616] SELinux: failed to load policy
00:02:54 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:54 executing program 0:
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:54 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10)

00:02:54 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:54 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x8}, 0x20)

00:02:54 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000000), 0x1c)
r3 = dup2(r2, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0)

00:02:54 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  728.308384] SELinux: failed to load policy
00:02:54 executing program 0:
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:54 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10)

00:02:54 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:54 executing program 0:
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  728.453559] SELinux: failed to load policy
00:02:54 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d9692794"], 0x18)

00:02:54 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:54 executing program 0:
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:54 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)

[  728.572727] SELinux: failed to load policy
00:02:54 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d9692794"], 0x18)

[  728.668759] SELinux: failed to load policy
00:02:55 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:55 executing program 0:
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:55 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:55 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d9692794"], 0x18)

00:02:55 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00)
close(r2)

[  729.149223] SELinux: failed to load policy
00:02:57 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:02:57 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:57 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000ffff"], 0x1c)

00:02:57 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:57 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0)
msgget$private(0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clock_gettime(0x7, &(0x7f0000000200))
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xe)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000)
tkill(r2, 0x20)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))
request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='/dev/cachefiles\x00', 0xfffffffffffffff9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10)

00:02:57 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:02:57 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  731.471610] SELinux: failed to load policy
00:02:57 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:02:57 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000ffff"], 0x1c)

00:02:57 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:02:57 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  731.576638] SELinux: failed to load policy
00:02:57 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000ffff"], 0x1c)

[  731.678051] SELinux: failed to load policy
00:03:00 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff8"], 0x1e)

00:03:00 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:00 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:00 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:00 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:00 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0)
msgget$private(0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clock_gettime(0x7, &(0x7f0000000200))
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xe)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000)
tkill(r2, 0x20)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))
request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='/dev/cachefiles\x00', 0xfffffffffffffff9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10)

00:03:00 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff8"], 0x1e)

[  734.517718] SELinux: failed to load policy
00:03:00 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:00 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:00 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:00 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff8"], 0x1e)

[  734.627487] SELinux: failed to load policy
00:03:00 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:00 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  734.728613] SELinux: failed to load policy
00:03:03 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:03 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff800"], 0x1f)

00:03:03 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:03 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:03 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:03 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0)
msgget$private(0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clock_gettime(0x7, &(0x7f0000000200))
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xe)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000)
tkill(r2, 0x20)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))
request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='/dev/cachefiles\x00', 0xfffffffffffffff9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10)

00:03:03 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:03 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff800"], 0x1f)

[  737.568239] SELinux: failed to load policy
00:03:03 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:03 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

[  737.637007] SELinux: failed to load policy
00:03:03 executing program 5:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757810000000d96927940000fffffff800"], 0x1f)

00:03:03 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

[  737.725243] SELinux: failed to load policy
00:03:06 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})

00:03:06 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x0, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:06 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:06 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lchown(0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0)
msgget$private(0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clock_gettime(0x7, &(0x7f0000000200))
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xe)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000)
tkill(r2, 0x20)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))
request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='/dev/cachefiles\x00', 0xfffffffffffffff9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10)

[  740.572808] binder: 31625:31628 Acquire 1 refcount change on invalid ref 0 ret -22
[  740.586697] binder: 31625:31628 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  740.596261] binder: 31625:31628 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  740.606089] binder: 31625:31628 Acquire 1 refcount change on invalid ref 0 ret -22
[  740.614383] binder: 31625:31639 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
00:03:06 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:06 executing program 5:
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  740.622321] binder: 31625:31628 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:06 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:07 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
socket$packet(0x11, 0x2, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:09 executing program 1:

00:03:09 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:09 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:09 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:09 executing program 5:
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

00:03:09 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:09 executing program 1:

00:03:09 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

00:03:09 executing program 1:

00:03:09 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x2dd)

[  743.760176] protocol 88fb is buggy, dev hsr_slave_0
[  743.765346] protocol 88fb is buggy, dev hsr_slave_1
00:03:09 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, 0x0, 0x0)

00:03:09 executing program 1:

00:03:09 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:12 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:12 executing program 1:

00:03:12 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, 0x0, 0x0)

00:03:12 executing program 5:
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

00:03:12 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:12 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:12 executing program 1:

00:03:12 executing program 0:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581)
syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
r1 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r1, 0x0, 0x0)

00:03:12 executing program 1:
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0xfffffffffffffff9)
clone(0x480002102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, &(0x7f0000000100), 0x60000002, 0x0)
r0 = gettid()
tgkill(r0, r0, 0x25)

00:03:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='.\x00', 0x410802, 0x0)
close(r1)

00:03:12 executing program 0:
inotify_init1(0x80000)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0)

00:03:12 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x942)

00:03:15 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})

00:03:15 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:15 executing program 5:
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

00:03:15 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000000c0)={0xfffffffffffffa93}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8})

00:03:15 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000540)=[{}, {r0, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:15 executing program 0:
mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x83, 0x0, 0x0)

00:03:15 executing program 0:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00')

00:03:15 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:15 executing program 0:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x0)

00:03:15 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7f, 0x2, [0x400]})

00:03:18 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:18 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:18 executing program 1:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

00:03:18 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000001040101ff0002040000ef00000100000c000600bf000000000000000c0003000000ff0221e1d100"], 0x2c}}, 0x0)

00:03:18 executing program 0:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x0)

00:03:18 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:18 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:18 executing program 1:

00:03:18 executing program 5:

[  752.807520] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[  752.841007] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
00:03:19 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:19 executing program 1:

00:03:19 executing program 5:

[  752.960136] protocol 88fb is buggy, dev hsr_slave_0
[  752.965445] protocol 88fb is buggy, dev hsr_slave_1
00:03:21 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:21 executing program 5:

00:03:21 executing program 1:

00:03:21 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:21 executing program 0:

00:03:21 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:21 executing program 5:

00:03:21 executing program 0:

00:03:21 executing program 1:

00:03:21 executing program 5:

00:03:21 executing program 1:

00:03:21 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:24 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:24 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl(r0, 0x9, &(0x7f0000000100))
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)

00:03:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x1, &(0x7f00000001c0)='e'})

00:03:24 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:24 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:24 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:24 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:24 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:24 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:24 executing program 1:
lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=@random={'user.', '//selinux\x00\x00\x01\x01'}, &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x0)

00:03:25 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:25 executing program 1:
io_submit(0x0, 0x6d102271666158ca, 0x0)

00:03:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x338, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
tkill(r0, 0x30)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0)

00:03:25 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:25 executing program 1:
io_submit(0x0, 0x6d102271666158ca, 0x0)

00:03:25 executing program 1:
io_submit(0x0, 0x6d102271666158ca, 0x0)

00:03:25 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:25 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:25 executing program 1:
io_submit(0x0, 0x6d102271666158ca, 0x0)

00:03:27 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:27 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x338, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
tkill(r0, 0x30)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0)

00:03:27 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:27 executing program 1:

00:03:27 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:27 executing program 1:

00:03:28 executing program 5:

00:03:28 executing program 1:

00:03:28 executing program 5:

00:03:28 executing program 5:

00:03:28 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0)
mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0)

[  762.000142] protocol 88fb is buggy, dev hsr_slave_0
[  762.005306] protocol 88fb is buggy, dev hsr_slave_1
[  762.480437] protocol 88fb is buggy, dev hsr_slave_0
[  762.485638] protocol 88fb is buggy, dev hsr_slave_1
[  762.560135] protocol 88fb is buggy, dev hsr_slave_0
[  762.565555] protocol 88fb is buggy, dev hsr_slave_1
00:03:30 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:30 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x2000000000071, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)

00:03:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, 0x0)

00:03:30 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:30 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:31 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0))
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x40, 0xc)
write(r2, &(0x7f0000000600)="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", 0x1c0)
sendfile(r2, r3, 0x0, 0x10000)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

00:03:31 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000580)=@caif, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xc)
write(r2, &(0x7f0000000600)="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", 0x158)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  765.016409] audit: type=1800 audit(1555977811.103:183): pid=31961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18351 res=0
00:03:31 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0))
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x40, 0xc)
write(r2, &(0x7f0000000600)="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", 0x1c0)
sendfile(r2, r3, 0x0, 0x10000)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  765.045878] audit: type=1804 audit(1555977811.113:184): pid=31961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir886853443/syzkaller.cNWPbG/262/file0" dev="sda1" ino=18351 res=1
00:03:31 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:31 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000580)=@caif, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xc)
write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea", 0x158)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  765.140333] audit: type=1800 audit(1555977811.193:185): pid=31963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=8 res=0
00:03:31 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000580)=@caif, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xc)
write(r2, &(0x7f0000000600)="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", 0x158)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

[  765.214633] audit: type=1804 audit(1555977811.203:186): pid=31963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891544006/syzkaller.d7gkBu/205/file0/file0" dev="loop1" ino=8 res=1
[  765.253111] audit: type=1800 audit(1555977811.213:187): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18340 res=0
[  765.279439] audit: type=1804 audit(1555977811.253:188): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir886853443/syzkaller.cNWPbG/263/file0" dev="sda1" ino=18340 res=1
[  765.312075] audit: type=1800 audit(1555977811.383:189): pid=31971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=18346 res=0
[  765.337566] audit: type=1804 audit(1555977811.403:190): pid=31971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir886853443/syzkaller.cNWPbG/264/file0" dev="sda1" ino=18346 res=1
[  765.430591] audit: type=1800 audit(1555977811.513:191): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=9 res=0
[  765.453750] protocol 88fb is buggy, dev hsr_slave_0
[  765.453814] protocol 88fb is buggy, dev hsr_slave_1
[  765.464583] audit: type=1804 audit(1555977811.533:192): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891544006/syzkaller.d7gkBu/206/file0/file0" dev="loop1" ino=9 res=1
[  765.680194] protocol 88fb is buggy, dev hsr_slave_0
[  765.685678] protocol 88fb is buggy, dev hsr_slave_1
00:03:34 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:34 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000580)=@caif, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xc)
write(r2, &(0x7f0000000600)="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", 0x158)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

00:03:34 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:34 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000580)=@caif, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0)
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xc)
write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea", 0x158)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

00:03:34 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:34 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  768.000197] protocol 88fb is buggy, dev hsr_slave_0
[  768.005442] protocol 88fb is buggy, dev hsr_slave_1
00:03:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
pipe2(&(0x7f0000000040), 0x0)

00:03:34 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:34 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:34 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:34 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
pipe2(&(0x7f0000000040), 0x0)

[  768.240162] protocol 88fb is buggy, dev hsr_slave_0
[  768.245512] protocol 88fb is buggy, dev hsr_slave_1
[  768.720698] protocol 88fb is buggy, dev hsr_slave_0
[  768.725845] protocol 88fb is buggy, dev hsr_slave_1
00:03:37 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:37 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

00:03:37 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
pipe2(&(0x7f0000000040), 0x0)

00:03:37 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:37 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:37 executing program 5:
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:37 executing program 5:
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:37 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
pipe2(&(0x7f0000000040), 0x0)

00:03:37 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

00:03:37 executing program 5:
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9c})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:40 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

00:03:40 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x1011}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:40 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
pipe2(&(0x7f0000000040), 0x0)

00:03:40 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:40 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:40 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
pipe2(&(0x7f0000000040), 0x0)

00:03:40 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
pipe2(&(0x7f0000000040), 0x0)

00:03:40 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0, 0x67ea}, 0x28)

00:03:43 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:43 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:43 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

00:03:43 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67ea}, 0x28)

00:03:43 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:43 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0)

00:03:43 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:43 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67ea}, 0x28)

00:03:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0)

00:03:43 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:43 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:46 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0)

00:03:46 executing program 1:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67ea}, 0x28)

00:03:46 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:46 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:46 executing program 1:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:46 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

00:03:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x67ea}, 0x28)

00:03:46 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

[  780.240224] protocol 88fb is buggy, dev hsr_slave_0
[  780.245384] protocol 88fb is buggy, dev hsr_slave_1
00:03:46 executing program 1:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:46 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x67ea}, 0x28)

00:03:49 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:49 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

00:03:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)

00:03:49 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:49 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x67ea}, 0x28)

00:03:49 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)

00:03:49 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="c3acc6eb3fde57", 0x0, 0x67ea}, 0x28)

00:03:49 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)

00:03:49 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:49 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:52 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:52 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="c3acc6eb3fde57", 0x0, 0x67ea}, 0x28)

00:03:52 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:52 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

00:03:52 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

00:03:52 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:52 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="c3acc6eb3fde57", 0x0, 0x67ea}, 0x28)

00:03:52 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:55 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae814134", 0x0, 0x67ea}, 0x28)

00:03:55 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0)
umount2(0x0, 0x0)

00:03:55 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

00:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae814134", 0x0, 0x67ea}, 0x28)

00:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:55 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:58 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:58 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae814134", 0x0, 0x67ea}, 0x28)

00:03:58 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:58 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

00:03:58 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0)
umount2(0x0, 0x0)

00:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:58 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:58 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b97", 0x0, 0x67ea}, 0x28)

00:03:58 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:58 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b97", 0x0, 0x67ea}, 0x28)

00:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:03:58 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b97", 0x0, 0x67ea}, 0x28)

00:03:58 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:03:59 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0)
umount2(0x0, 0x0)

00:04:01 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

00:04:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:04:01 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

00:04:01 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0}, 0x28)

00:04:01 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:04:01 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$void(r0, 0x0)

00:04:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:04:01 executing program 2:
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
fstat(0xffffffffffffff9c, 0x0)
setgid(0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000580)={&(0x7f0000ff4000/0xc000)=nil, 0x9ac6, 0x1, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x9})
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb86041fe2aee813cf1016ae4174741298b0e26633269f46282bad23bf91deb6084923107d2034797eb0883271b0b5ebd4e713b0b7cf0ba65a2ca3bac74b20548911e1f9c07b3d8944008a3f62484dc7eb4549ffb749b9239826bfd2c979affe53eabd9c61606d3b1b2a8c5da2383547cf3bf13cc150e456328f0310551c7b533029990500"], 0x1, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$tipc(0x0)
creat(&(0x7f0000000540)='./bus\x00', 0x2c)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x600)

00:04:01 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

00:04:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:04:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000040), 0x0)

00:04:01 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0}, 0x28)

[  795.461925] kauditd_printk_skb: 4 callbacks suppressed
[  795.461932] audit: type=1804 audit(1555977841.543:197): pid=32385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
[  795.615066] audit: type=1804 audit(1555977841.703:198): pid=32402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
[  795.675374] audit: type=1804 audit(1555977841.763:199): pid=32396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
[  795.723581] audit: type=1804 audit(1555977841.763:200): pid=32396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
[  795.751429] audit: type=1804 audit(1555977841.803:201): pid=32402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
[  795.787101] audit: type=1804 audit(1555977841.823:202): pid=32396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/434/bus" dev="sda1" ino=16631 res=1
00:04:04 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="86000140005b6a733d1533eaa29450e03bd4690017eef9490066d6d6e300b0000974ef7b0304eae5eb0a6505bf3b2ad674518e6f8a42eb8fff"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

00:04:04 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:04:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(0x0, 0x0)

00:04:04 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c3acc6eb3fde57ae8141342b975d", 0x0}, 0x28)

00:04:04 executing program 2:
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
fstat(0xffffffffffffff9c, 0x0)
setgid(0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000580)={&(0x7f0000ff4000/0xc000)=nil, 0x9ac6, 0x1, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x9})
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb86041fe2aee813cf1016ae4174741298b0e26633269f46282bad23bf91deb6084923107d2034797eb0883271b0b5ebd4e713b0b7cf0ba65a2ca3bac74b20548911e1f9c07b3d8944008a3f62484dc7eb4549ffb749b9239826bfd2c979affe53eabd9c61606d3b1b2a8c5da2383547cf3bf13cc150e456328f0310551c7b533029990500"], 0x1, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$tipc(0x0)
creat(&(0x7f0000000540)='./bus\x00', 0x2c)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x600)

00:04:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(0x0, 0x0)

00:04:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(0x0, 0x0)

[  798.408069] audit: type=1804 audit(1555977844.493:203): pid=32416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir284114034/syzkaller.eBAGKg/435/bus" dev="sda1" ino=16659 res=1
00:04:04 executing program 3:
clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
getrusage(0x0, &(0x7f0000000000))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000005, 0x9c})
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x0)

00:04:04 executing program 1:
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
fstat(0xffffffffffffff9c, 0x0)
setgid(0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000580)={&(0x7f0000ff4000/0xc000)=nil, 0x9ac6, 0x1, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x9})
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb86041fe2aee813cf1016ae4174741298b0e26633269f46282bad23bf91deb6084923107d2034797eb0883271b0b5ebd4e713b0b7cf0ba65a2ca3bac74b20548911e1f9c07b3d8944008a3f62484dc7eb4549ffb749b9239826bfd2c979affe53eabd9c61606d3b1b2a8c5da2383547cf3bf13cc150e456328f0310551c7b533029990500"], 0x1, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$tipc(0x0)
creat(&(0x7f0000000540)='./bus\x00', 0x2c)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x600)

00:04:04 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000380)={@random="9d827695162c", @link_local, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @random="98858a43d688"}, {@random, @current}}}}}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

00:04:04 executing program 4:
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)
fstat(0xffffffffffffff9c, 0x0)
setgid(0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000580)={&(0x7f0000ff4000/0xc000)=nil, 0x9ac6, 0x1, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x9})
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb86041fe2aee813cf1016ae4174741298b0e26633269f46282bad23bf91deb6084923107d2034797eb0883271b0b5ebd4e713b0b7cf0ba65a2ca3bac74b20548911e1f9c07b3d8944008a3f62484dc7eb4549ffb749b9239826bfd2c979affe53eabd9c61606d3b1b2a8c5da2383547cf3bf13cc150e456328f0310551c7b533029990500"], 0x1, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$tipc(0x0)
creat(&(0x7f0000000540)='./bus\x00', 0x2c)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0)
unshare(0x600)

[  798.689059] audit: type=1804 audit(1555977844.773:204): pid=32447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir580887337/syzkaller.TcY1ou/543/bus" dev="sda1" ino=16664 res=1
[  799.200793] protocol 88fb is buggy, dev hsr_slave_0
[  799.206620] protocol 88fb is buggy, dev hsr_slave_1
[  903.650036] INFO: rcu_preempt self-detected stall on CPU
[  903.655711] 	1-...: (1 GPs behind) idle=602/140000000000001/0 softirq=85337/85338 fqs=2 
[  903.663947] 	 (t=10500 jiffies g=24480 c=24479 q=68)
[  903.669184] rcu_preempt kthread starved for 10494 jiffies! g24480 c24479 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
[  903.680520] rcu_preempt     R  running task    29776     8      2 0x80000000
[  903.688736] Call Trace:
[  903.691726]  __schedule+0x7be/0x1cf0
[  903.695885]  ? pci_mmcfg_check_reserved+0x150/0x150
[  903.701446]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  903.706795]  schedule+0x92/0x1c0
[  903.710190]  schedule_timeout+0x43e/0xe10
[  903.714390]  ? usleep_range+0x130/0x130
[  903.718380]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  903.723493]  ? prepare_to_swait+0xcc/0x100
[  903.727744]  ? call_timer_fn+0x680/0x680
[  903.731823]  rcu_gp_kthread+0xbf4/0x1ec0
[  903.735916]  ? force_qs_rnp+0x4e0/0x4e0
[  903.740408]  kthread+0x31c/0x430
[  903.743783]  ? force_qs_rnp+0x4e0/0x4e0
[  903.747766]  ? kthread_create_on_node+0xd0/0xd0
[  903.752451]  ret_from_fork+0x3a/0x50
[  903.756574] NMI backtrace for cpu 1
[  903.760947] CPU: 1 PID: 32416 Comm: syz-executor.2 Not tainted 4.14.113 #3
[  903.767977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  903.777357] Call Trace:
[  903.780475]  <IRQ>
[  903.782642]  dump_stack+0x138/0x19c
[  903.786289]  nmi_cpu_backtrace.cold+0x57/0x94
[  903.790800]  ? irq_force_complete_move.cold+0x7d/0x7d
[  903.796190]  nmi_trigger_cpumask_backtrace+0x141/0x189
[  903.802050]  arch_trigger_cpumask_backtrace+0x14/0x20
[  903.807358]  rcu_dump_cpu_stacks+0x186/0x1d2
[  903.811918]  rcu_check_callbacks.cold+0x43d/0xd0a
[  903.817829]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  903.823406]  update_process_times+0x31/0x70
[  903.827790]  tick_sched_handle+0x85/0x160
[  903.832123]  tick_sched_timer+0x43/0x130
[  903.836681]  __hrtimer_run_queues+0x273/0xbd0
[  903.841244]  ? tick_sched_do_timer+0xe0/0xe0
[  903.845748]  ? hrtimer_start_range_ns+0x10e0/0x10e0
[  903.850790]  hrtimer_interrupt+0x1d8/0x5d0
[  903.855080]  smp_apic_timer_interrupt+0x12c/0x600
[  903.859940]  apic_timer_interrupt+0x8e/0xa0
[  903.864374]  </IRQ>
[  903.866625] RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60
[  903.871987] RSP: 0018:ffff88806f937530 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
[  903.879876] RAX: ffff88806e7b61c0 RBX: 0000000000000000 RCX: ffffc9000686a000
[  903.887512] RDX: 0000000000040000 RSI: ffffffff82d5e09d RDI: ffff8880a53d7808
[  903.894921] RBP: ffff88806f937598 R08: 1ffff110126a9347 R09: ffffed10126a9348
[  903.902300] R10: ffffed10126a9347 R11: ffff888093549a3d R12: 0000000000000000
[  903.909670] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  903.917089]  ? iov_iter_copy_from_user_atomic+0x5ed/0x900
[  903.922829]  ? iov_iter_copy_from_user_atomic+0x619/0x900
[  903.928745]  ? ext4_write_begin+0x1030/0x1030
[  903.933288]  generic_perform_write+0x25c/0x490
[  903.938075]  ? page_endio+0x530/0x530
[  903.942596]  ? current_time+0xb0/0xb0
[  903.946424]  ? ext4_file_write_iter+0x205/0xfd0
[  903.951128]  __generic_file_write_iter+0x239/0x5b0
[  903.956133]  ext4_file_write_iter+0x2c0/0xfd0
[  903.960660]  ? ext4_file_mmap+0x2c0/0x2c0
[  903.964823]  ? lock_is_held_type+0x17e/0x210
[  903.969265]  ? __might_sleep+0x93/0xb0
[  903.973334]  do_iter_readv_writev+0x41e/0x680
[  903.978387]  ? vfs_dedupe_file_range+0x8f0/0x8f0
[  903.983176]  ? rw_verify_area+0xea/0x2b0
[  903.987358]  do_iter_write+0x154/0x550
[  903.991260]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  903.996906]  ? __kmalloc+0x379/0x7a0
[  904.000728]  vfs_iter_write+0x77/0xb0
[  904.004544]  iter_file_splice_write+0x578/0xae0
[  904.009241]  ? touch_atime+0xce/0x250
[  904.013254]  ? page_cache_pipe_buf_steal+0x2f0/0x2f0
[  904.019008]  ? rw_verify_area+0xea/0x2b0
[  904.023203]  ? page_cache_pipe_buf_steal+0x2f0/0x2f0
[  904.028327]  direct_splice_actor+0x126/0x1a0
[  904.032842]  splice_direct_to_actor+0x2a1/0x7b0
[  904.037538]  ? generic_pipe_buf_nosteal+0x10/0x10
[  904.042408]  ? do_splice_to+0x170/0x170
[  904.046640]  ? rw_verify_area+0xea/0x2b0
[  904.051180]  do_splice_direct+0x18d/0x230
[  904.055374]  ? splice_direct_to_actor+0x7b0/0x7b0
[  904.060335]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  904.065151]  ? __sb_start_write+0x153/0x2f0
[  904.069489]  do_sendfile+0x4db/0xbd0
[  904.073492]  ? do_compat_pwritev64+0x140/0x140
[  904.078116]  ? put_timespec64+0xb4/0x100
[  904.082304]  ? nsecs_to_jiffies+0x30/0x30
[  904.086567]  SyS_sendfile64+0x102/0x110
[  904.090570]  ? SyS_sendfile+0x130/0x130
[  904.094556]  ? do_syscall_64+0x53/0x630
[  904.098555]  ? SyS_sendfile+0x130/0x130
[  904.102545]  do_syscall_64+0x1eb/0x630
[  904.106441]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  904.111308]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  904.116616] RIP: 0033:0x458c29
[  904.119909] RSP: 002b:00007f6840466c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  904.127995] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29
[  904.135373] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  904.142755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  904.150041] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f68404676d4
[  904.157353] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 00000000ffffffff
[  904.170029] INFO: rcu_sched detected stalls on CPUs/tasks:
[  904.176271] 	1-...: (1 GPs behind) idle=602/140000000000001/0 softirq=85335/85338 fqs=2 
[  904.184532] 	(detected by 0, t=10553 jiffies, g=17617, c=17616, q=8)
[  904.191354] Sending NMI from CPU 0 to CPUs 1:
[  904.196776] NMI backtrace for cpu 1
[  904.196781] CPU: 1 PID: 32416 Comm: syz-executor.2 Not tainted 4.14.113 #3
[  904.196786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  904.196789] task: ffff88806e7b61c0 task.stack: ffff88806f930000
[  904.196792] RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60
[  904.196795] RSP: 0018:ffff88806f9373d8 EFLAGS: 00000282
[  904.196801] RAX: ffff88806e7b61c0 RBX: ffff8880724138b8 RCX: ffffc9000686a000
[  904.196805] RDX: dffffc0000000000 RSI: ffffffff8616c2c6 RDI: ffff8880724138c0
[  904.196808] RBP: ffff88806f937438 R08: 0000000000000000 R09: ffff88806e7b6ab0
[  904.196812] R10: ffff88806e7b6a90 R11: ffff88806e7b61c0 R12: ffff888090debdf8
[  904.196816] R13: 00000000014200ca R14: dffffc0000000000 R15: dffffc0000000000
[  904.196819] FS:  00007f6840467700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
[  904.196822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  904.196826] CR2: 0000001b30234000 CR3: 000000005f355000 CR4: 00000000001406e0
[  904.196828] Call Trace:
[  904.196831]  ? find_get_entry+0x9d/0x520
[  904.196833]  pagecache_get_page+0x4a/0x750
[  904.196836]  grab_cache_page_write_begin+0x74/0xa0
[  904.196839]  ext4_da_write_begin+0x24c/0xc30
[  904.196842]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  904.196844]  ? ext4_write_begin+0x1030/0x1030
[  904.196847]  ? retint_kernel+0x2d/0x2d
[  904.196850]  generic_perform_write+0x1ff/0x490
[  904.196852]  ? page_endio+0x530/0x530
[  904.196855]  ? current_time+0xb0/0xb0
[  904.196857]  ? ext4_file_write_iter+0x205/0xfd0
[  904.196860]  __generic_file_write_iter+0x239/0x5b0
[  904.196862]  ext4_file_write_iter+0x2c0/0xfd0
[  904.196865]  ? ext4_file_mmap+0x2c0/0x2c0
[  904.196867]  ? __might_sleep+0x93/0xb0
[  904.196870]  do_iter_readv_writev+0x41e/0x680
[  904.196872]  ? vfs_dedupe_file_range+0x8f0/0x8f0
[  904.196875]  ? rw_verify_area+0xea/0x2b0
[  904.196877]  do_iter_write+0x154/0x550
[  904.196880]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  904.196883]  ? __kmalloc+0x379/0x7a0
[  904.196885]  vfs_iter_write+0x77/0xb0
[  904.196888]  iter_file_splice_write+0x578/0xae0
[  904.196890]  ? touch_atime+0xce/0x250
[  904.196893]  ? page_cache_pipe_buf_steal+0x2f0/0x2f0
[  904.196895]  ? rw_verify_area+0xea/0x2b0
[  904.196898]  ? page_cache_pipe_buf_steal+0x2f0/0x2f0
[  904.196900]  direct_splice_actor+0x126/0x1a0
[  904.196903]  splice_direct_to_actor+0x2a1/0x7b0
[  904.196906]  ? generic_pipe_buf_nosteal+0x10/0x10
[  904.196908]  ? do_splice_to+0x170/0x170
[  904.196911]  ? rw_verify_area+0xea/0x2b0
[  904.196913]  do_splice_direct+0x18d/0x230
[  904.196916]  ? splice_direct_to_actor+0x7b0/0x7b0
[  904.196919]  ? rcu_sync_lockdep_assert+0x73/0xb0
[  904.196921]  ? __sb_start_write+0x153/0x2f0
[  904.196924]  do_sendfile+0x4db/0xbd0
[  904.196927]  ? do_compat_pwritev64+0x140/0x140
[  904.196929]  ? put_timespec64+0xb4/0x100
[  904.196932]  ? nsecs_to_jiffies+0x30/0x30
[  904.196934]  SyS_sendfile64+0x102/0x110
[  904.196937]  ? SyS_sendfile+0x130/0x130
[  904.196939]  ? do_syscall_64+0x53/0x630
[  904.196942]  ? SyS_sendfile+0x130/0x130
[  904.196944]  do_syscall_64+0x1eb/0x630
[  904.196947]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  904.196950]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  904.196952] RIP: 0033:0x458c29
[  904.196955] RSP: 002b:00007f6840466c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  904.196961] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29
[  904.196964] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  904.196968] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  904.196971] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f68404676d4
[  904.196974] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 00000000ffffffff
[  904.196976] Code: 4c 89 35 9b ea bd 07 41 be f4 ff ff ff e8 03 43 ee ff 48 c7 05 85 ea bd 07 00 00 00 00 e9 2f ec ff ff 65 48 8b 04 25 40 ee 01 00 <48> 85 c0 74 1a 65 8b 15 bb 06 a5 7e 81 e2 00 01 1f 00 75 0b 8b 
[  904.197088] rcu_sched kthread starved for 10548 jiffies! g17617 c17616 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
[  904.577078] rcu_sched       R  running task    29776     9      2 0x80000000
[  904.584310] Call Trace:
[  904.586923]  __schedule+0x7be/0x1cf0
[  904.590742]  ? pci_mmcfg_check_reserved+0x150/0x150
[  904.595776]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  904.600899]  schedule+0x92/0x1c0
[  904.604282]  schedule_timeout+0x43e/0xe10
[  904.608540]  ? usleep_range+0x130/0x130
[  904.612530]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  904.617665]  ? prepare_to_swait+0xcc/0x100
[  904.621924]  ? call_timer_fn+0x680/0x680
[  904.626014]  rcu_gp_kthread+0xbf4/0x1ec0
[  904.630122]  ? force_qs_rnp+0x4e0/0x4e0
[  904.634144]  kthread+0x31c/0x430
[  904.637526]  ? force_qs_rnp+0x4e0/0x4e0
[  904.641511]  ? kthread_create_on_node+0xd0/0xd0
[  904.646285]  ret_from_fork+0x3a/0x50