400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c28800000180c200000086dd60b4090000303a0080000000000000000000ffffe0000002ff020000000000000000000000000001800090780009040060b680fa0000000000000000000000000000ffffffe5b7ff00000000000000000000ffffac14ffbb"], 0x0)

06:49:45 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1852.327454][T21895] binder_alloc: 21887: binder_alloc_buf, no vma
[ 1852.359444][T21894] 9pnet: Could not find request transport: fV
[ 1852.387978][T21899] 9pnet: Could not find request transport: fV
06:49:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=f\\,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:49:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "1ab3fa976f5d70f5", "f8add01563204b880e9be50c18de97f4", "7f67a799", "963c829e189b8f84"}, 0x28)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f"], 0x1)

06:49:45 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x5)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1852.613010][T21916] binder_alloc: 21911: binder_alloc_buf, no vma
06:49:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6800}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1852.672254][T21913] 9pnet: Could not find request transport: f\
[ 1852.716889][T21926] 9pnet: Could not find request transport: f\
06:49:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:45 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x6)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1852.843590][T21931] binder_alloc: 21929: binder_alloc_buf, no vma
06:49:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1852.889377][T21937] binder_alloc: 21929: binder_alloc_buf, no vma
06:49:46 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6c00}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1852.936175][T21935] 9pnet: Could not find request transport: fb
[ 1852.973773][T21943] 9pnet: Could not find request transport: fb
06:49:46 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x7)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:46 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1853.017981][T21946] binder_alloc: 21945: binder_alloc_buf, no vma
06:49:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1853.167308][T21956] 9pnet: Could not find request transport: fg
[ 1853.190291][T21958] 9pnet: Could not find request transport: fg
06:49:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_init_net_socket$ax25(0x3, 0x0, 0xce)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4)
madvise(&(0x7f0000234000/0x3000)=nil, 0x3000, 0xf)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000240)=""/74, 0x4a)

06:49:46 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7400}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:46 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:46 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fq,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1853.534028][T21966] 9pnet: Could not find request transport: fq
[ 1853.570804][T21973] binder_alloc: 21964: binder_alloc_buf, no vma
06:49:46 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x300)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1853.581465][T21974] 9pnet: Could not find request transport: fq
06:49:46 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fs,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1853.635164][T21977] binder_alloc: 21964: binder_alloc_buf, no vma
06:49:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:46 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7a00}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:47 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x500)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1853.991050][T21996] 9pnet: Could not find request transport: fs
06:49:47 executing program 0:
syz_mount_image$xfs(&(0x7f0000000440)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000340)="58465342886859727e07743b00001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000400000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040ce509611163ad6a21a41416b914b13b462dc857e850424fec9e93717d2a5d9751de06c6ef476d93cf042fb757b2", 0xb2}], 0x0, 0x0)

06:49:47 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x600)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1854.105640][T21998] binder_alloc: 21991: binder_alloc_buf, no vma
[ 1854.111388][T21997] 9pnet: Could not find request transport: fs
06:49:47 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fu,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x1000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:47 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x700)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1854.253996][T22007] binder_alloc: 22006: binder_alloc_buf, no vma
06:49:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000060}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x2000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1854.335559][T22012] 9pnet: Could not find request transport: fu
[ 1854.360201][T22008] XFS (loop0): device supports 512 byte sectors (not 0)
[ 1854.377625][T22023] 9pnet: Could not find request transport: fu
06:49:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:47 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fw,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:47 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x157c)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1854.605161][T22034] 9pnet: Could not find request transport: fw
[ 1854.641766][T22043] 9pnet: Could not find request transport: fw
06:49:47 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0)
write$nbd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000000000000000082b0cfc4336aa677157bd559bf1403d554127ab138be0633e8bd3410000000000000005616b17333ad88f7e4a258981e458e96afda2a87223ba7f4"], 0x1)

06:49:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x3000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:47 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:47 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd=', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x4000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x7c15)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1854.864494][T22056] 9pnet: Could not find request transport: fd=rfdno=0x0000000000000003
06:49:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:48 executing program 0:

[ 1854.917677][T22062] 9pnet: Could not find request transport: fd=rfdno=0x0000000000000003
06:49:48 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'\\fdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x5000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:48 executing program 0:

06:49:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xff00)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000010}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1855.138540][T22076] 9pnet: Insufficient options for proto=fd
[ 1855.176567][T22080] 9pnet: Insufficient options for proto=fd
06:49:48 executing program 0:

06:49:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:49:48 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'r%dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:48 executing program 0:

06:49:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1855.436376][T22097] 9pnet: Insufficient options for proto=fd
[ 1855.460506][T22101] 9pnet: Insufficient options for proto=fd
06:49:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:48 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'r.dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:48 executing program 0:

06:49:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x12000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:48 executing program 0:

06:49:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x3000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1855.674914][T22115] 9pnet: Insufficient options for proto=fd
[ 1855.704518][T22115] 9pnet: Insufficient options for proto=fd
06:49:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:48 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'r/dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x20000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1855.862018][T22122] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 0:

06:49:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1855.927886][T22130] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'r\\dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:49 executing program 0:

06:49:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x5000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x3f000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1856.129737][T22145] 9pnet: Insufficient options for proto=fd
[ 1856.145961][T22145] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfIno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:49 executing program 0:

06:49:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x6000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x40000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1856.331199][T22159] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:49 executing program 0:

[ 1856.381790][T22161] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfQno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x48000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x7000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:49 executing program 0:

[ 1856.539593][T22176] 9pnet: Insufficient options for proto=fd
[ 1856.569922][T22178] 9pnet: Insufficient options for proto=fd
06:49:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x4c000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfRno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:49 executing program 0:

06:49:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:49 executing program 0:

06:49:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1856.795068][T22192] 9pnet: Insufficient options for proto=fd
[ 1856.825685][T22198] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfSno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x60000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:50 executing program 0:

06:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1857.062667][T22211] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x7c150000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1857.108736][T22217] binder_alloc_new_buf_locked: 14 callbacks suppressed
[ 1857.108744][T22217] binder_alloc: 22215: binder_alloc_buf, no vma
[ 1857.124229][T22218] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 0:

06:49:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfTno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x68000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:50 executing program 0:

06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xf6ffffff)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1857.337358][T22233] binder_alloc: 22231: binder_alloc_buf, no vma
[ 1857.349435][T22232] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6c000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1857.425370][T22235] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 0:

06:49:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfVno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xff000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1857.537511][T22245] binder_alloc: 22243: binder_alloc_buf, no vma
06:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x74000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1857.591265][T22249] 9pnet: Insufficient options for proto=fd
[ 1857.629213][T22254] 9pnet: Insufficient options for proto=fd
06:49:50 executing program 0:

06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xfffffff6)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rf\\no', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:50 executing program 0:

[ 1857.778463][T22264] binder_alloc: 22261: binder_alloc_buf, no vma
06:49:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:50 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7a000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1857.893959][T22269] 9pnet: Insufficient options for proto=fd
[ 1857.916327][T22271] 9pnet: Insufficient options for proto=fd
06:49:51 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfbno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:51 executing program 0:

[ 1858.026376][T22282] binder_alloc: 22276: binder_alloc_buf, no vma
06:49:51 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfdfdffff}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:51 executing program 0:

[ 1858.185391][T22289] 9pnet: Insufficient options for proto=fd
[ 1858.221933][T22297] 9pnet: Insufficient options for proto=fd
06:49:51 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1858.253907][T22298] binder_alloc: 22293: binder_alloc_buf, no vma
06:49:51 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfgno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1858.307632][T22302] binder_alloc: 22293: binder_alloc_buf, no vma
06:49:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1858.442589][T22309] 9pnet: Insufficient options for proto=fd
06:49:51 executing program 0:

06:49:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfffffdfd}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1858.485332][T22311] 9pnet: Insufficient options for proto=fd
06:49:51 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x300000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:51 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfqno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:51 executing program 0:

[ 1858.624994][T22318] binder_alloc: 22316: binder_alloc_buf, no vma
06:49:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:51 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x100000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:51 executing program 0:

[ 1858.737176][T22328] 9pnet: Insufficient options for proto=fd
[ 1858.780694][T22330] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x500000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1858.846983][T22338] binder_alloc: 22334: binder_alloc_buf, no vma
06:49:52 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfsno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:52 executing program 0:

06:49:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x200000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1859.001072][T22345] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x600000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1859.048800][T22349] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfuno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:52 executing program 0:

[ 1859.121365][T22354] binder_alloc: 22352: binder_alloc_buf, no vma
06:49:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x700000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x300000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1859.228176][T22363] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 0:

[ 1859.286745][T22365] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfwno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x400000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:52 executing program 0:

06:49:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:52 executing program 0:

06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1859.555956][T22382] 9pnet: Insufficient options for proto=fd
[ 1859.593594][T22389] 9pnet: Insufficient options for proto=fd
06:49:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x500000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:52 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfd%o', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:52 executing program 0:

06:49:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x600000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:52 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x7c15000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1859.796690][T22402] 9pnet: Insufficient options for proto=fd
[ 1859.827934][T22407] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 0:

06:49:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdn%', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x700000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:53 executing program 0:

06:49:53 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xf6ffffff00000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1860.050982][T22419] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1860.120076][T22425] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x1200000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdn\\', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:53 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xff00000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:53 executing program 0:

06:49:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1860.320586][T22440] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 0:

06:49:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x2000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1860.362241][T22444] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:53 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xffffffff00000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:53 executing program 0:

06:49:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x3f00000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1860.554402][T22454] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$int_out(r1, 0x2, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:53 executing program 0:

[ 1860.621866][T22462] 9pnet: Insufficient options for proto=fd
06:49:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x4000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:53 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x400000000007)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
syz_emit_ethernet(0x0, &(0x7f000000a000)=ANY=[], 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x200000000000004)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

06:49:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:53 executing program 1:
r0 = gettid()
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc00, 0x0)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x4)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000280)={0xed, &(0x7f00000002c0)=""/237})
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x10000, @ipv4={[], [], @broadcast}, 0x10001}, 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:49:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x4800000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1860.901483][T22474] 9pnet: Insufficient options for proto=fd
06:49:54 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/fib_trie\x00')
r3 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x42100, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000100)={r2, r3, 0xffffffffffffff86})
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1860.981112][T22487] 9pnet: Insufficient options for proto=fd
06:49:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:54 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x4, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x4c00000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:54 executing program 1:
r0 = gettid()
r1 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000016c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000017c0)=0xe8)
sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001640)=[{&(0x7f00000001c0)="ad0f377aa4b4fbdcdf0f37f13123577b91230b3ff39ba877bba886869568493d3319a16495e2b46d545e67e4bb392e9ccf21e434ed522ca53b9bc77da2865a4a8418a56dd958fa84e1ea78f37a4c6b1dc2073de844234c18", 0x58}, {&(0x7f0000000240)="2305b90ba01daa01e7336a46a99da291f8c15df4295274d5191703039ee88f1fef657d1000f5ae215a2d7a95834c545a46e222801391ee263dbd1120c376dc3e08f56d3a44f5c559961f583d7d4cf9c8b926e83a5f972e6eb1a518fab5f38035083883d2de16ffb1f15f55a158b3ec4e8fab88440092f575fc262e7665ed4a1d688b4533bb1d81c94a2f5248a744ead0cf170284ad0f18d7367ff223b52d7bb880b58494fb84a280be920954a6cab874bc41103dcf7b6f27b90b742d815a016daf75b77dd06138f535fc13d8f93b8153f96621209a9ba6608686f932c0431aec8774366bba1c76f77af9087ad5746e46af9b26d9", 0xf4}, {&(0x7f0000000340)="1d45df366d0ec6c9e6263dce74efced40fd922d6ae18b7bfc2954b2b68bc33b35490d79f300247b51cd8bd196a8dbc5feb4f9d743669a4fa9920d498a2fc961b6c5d83bcd39a9aebcf6025f09695fd42bc8f1a5add6e64400c048c51ef0c4e82023288e6fe66f53a8f9f3e71441db43adb780d2286552734fb004cdad4946824ce44d73a4d7d99b923716cb34ccfa97024e30869449d9ca5", 0x98}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000140)="be0e1bace3196e253f18dc29303fec57dfe86c622a5043435595", 0x1a}, {&(0x7f0000001400)="73b5699d565c41e3092365ddb10d53dc681cd244988c64c2037c0fb9637022b2b24374bf21d7d18ff85e2cc6aebb11f839085c632a7abbb2169f89b92a5adb0da4533c89502109f876ff7472036915001285d8994a743eb9a7980d4bdb2d4a3b6ffa527637f7340d47103722ac274329a10f0374964fa91c9e27352b15ce61428e3ad3d46f2602af0569cc976f68ffb0ef19e4f56e9d858b6d4b148057a33414165303baae959b", 0xa7}, {&(0x7f00000014c0)="e7d6d81e3f66ace91db554d493a545fab290b7817448361461135639a71bef498b4d755314e9b8c511daf54a14beb9ae14bd829e451c7e716396f6e0b8897919165878a7a0c781236d118cf86cb308940466e0e5a956320cb359e648ae9f0e41557f9755c681c05f989cec7a59669be35dd869bfc9eaf23385022e898483b0d09ee05e044dd884a657f7ad2e799bb9d16580c3b17f88314d298d8ec36c6bc33b880d8d4bd10ce10cb6ebe579dc6a13c053612997d304cd4bd0d0acd028d4d90b6d2c69", 0xc3}, {&(0x7f00000015c0)="0c35652515b94485eb1b893ac86791037998319e7a82599e2eeff788d9988ef7486f6736f4a2e9025ff15800c6e5847aef838a20bc6be77a842a80cccc3b1ab72cfcfc1019b18c70793cc93ea20298", 0x4f}], 0x8, &(0x7f0000001800)=[@ip_retopts={{0x94, 0x0, 0x7, {[@generic={0x7, 0xc, "15f577dacdf808da52ed"}, @ssrr={0x89, 0x1f, 0x200000, [@multicast1, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x800, @rand_addr=0x1, @multicast2]}, @cipso={0x86, 0x48, 0x101, [{0x7, 0x10, "e5d29901289fd25c8bf5d0c60671"}, {0x1, 0x11, "f2a97f285679a7044554021449c151"}, {0x3, 0x7, "e5ea077bdc"}, {0x5, 0xb, "219e9f656513591293"}, {0x5, 0xf, "e2bf74892c11faf0eebcaf0790"}]}, @rr={0x7, 0xf, 0x0, [@multicast2, @broadcast, @rand_addr=0x82d]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x93ba}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x44, 0xf, "959381f487fde6483de317e238"}, @rr={0x7, 0x13, 0x2, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @multicast2]}, @generic={0x83, 0x9, "5f02d4645b6adb"}, @generic={0x8b, 0xa, "8f1392755cf91677"}, @cipso={0x86, 0x17, 0x2, [{0x6, 0x3, 'u'}, {0x7, 0xe, "9322e95fe357b96807cbdc4a"}]}]}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@ra={0x94, 0x6, 0x9}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x0, [{[@multicast2], 0xfffffffffffffe00}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0xdb}, {[], 0x10000}]}, @generic={0x83, 0x4, "9f57"}, @noop, @cipso={0x86, 0x8c, 0x6fc43271, [{0x1, 0xa, "68c1cef8d50ed25f"}, {0x0, 0x4, "dccb"}, {0x7, 0xa, "047556440bb1f15d"}, {0x7, 0x11, "28e21359a990fdfe0486277333f8b3"}, {0x0, 0x12, "8cf9c8ea5206c43767666fa7a2bef2e2"}, {0x5, 0x12, "64203cea78a1b67782020e4897a5e975"}, {0x7, 0x11, "1f84a0f9aac5c5366db4c2873f0170"}, {0x7, 0xe, "56358ef23de0b3e2d098c9a5"}, {0x0, 0x8, "de45dc6683be"}, {0x2, 0x12, "a9ef0aeb28ddf7e8a4d25d5d79300280"}]}, @rr={0x7, 0x27, 0x6, [@multicast2, @rand_addr=0x7, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x94, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x200, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @multicast2, @local, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x1f, [@rand_addr=0x8, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x6, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @loopback, @empty]}, @rr={0x7, 0x17, 0x1ff, [@dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, @rand_addr, @broadcast]}, @timestamp={0x44, 0x28, 0x1, 0x1, 0x3ff, [{[@rand_addr=0x7], 0x5c9c89a2}, {[], 0x9c62}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x10000}, {[@broadcast], 0xa49}, {[], 0x4}, {[], 0x101}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x6, 0x3, 0x7fffffff, [{[], 0x80}, {[], 0x4}, {[], 0xfe2}, {[], 0x1}, {[], 0x4a93}, {[@broadcast], 0x2}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x5}]}, @rr={0x7, 0x13, 0xffff, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @rr={0x7, 0x13, 0x8, [@loopback, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x328}}, {{&(0x7f0000001b40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x2, 0x40000)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x6}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_create(0x5, &(0x7f0000001b80)={0x0, 0x7, 0x1, @tid=r0}, &(0x7f0000001c80))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1861.159829][T22497] 9pnet: Insufficient options for proto=fd
[ 1861.219162][T22502] 9pnet: Insufficient options for proto=fd
06:49:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6000000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:54 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x200000000000004)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

06:49:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:54 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x5, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6800000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1861.793941][T22515] 9pnet: Insufficient options for proto=fd
06:49:55 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x6c00000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1861.841525][T22522] 9pnet: Insufficient options for proto=fd
06:49:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:55 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x6, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:55 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x200000000000004)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

[ 1862.014748][T22534] 9pnet: Insufficient options for proto=fd
[ 1862.045689][T22538] 9pnet: Insufficient options for proto=fd
06:49:57 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0x100004000, 0x10000fffff000})

06:49:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x7, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7400000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b0900010001010fd83ffe58", 0x1f}], 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'})

06:49:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1864.330047][T22547] 9pnet: Insufficient options for proto=fd
[ 1864.348923][T22552] binder_alloc_new_buf_locked: 19 callbacks suppressed
[ 1864.348933][T22552] binder_alloc: 22544: binder_alloc_buf, no vma
[ 1864.366267][T22555] 9pnet: Insufficient options for proto=fd
06:49:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="279fddd2742cc6367a2b981a78c2030eb89b3b21e0fa37314e53668a8a6bc52fc7e892ed50e4f0dfc4e9150bcdb9e675e3824e75e9791c4a604e229b3b9f4b53dea05e9edcf2c0269325b1939aa6bc7e58788ff1f45a9a2a938d09409cbcb0f59253cd43a0d1d9e09e6583869cc4ec439d1a024c5f154b3f340ff9d87220d40165ce17f8e0f907bd74c7a78aba14e2b6261739c9ed67ff35972b8fcc86e8fde6a95e", 0xa2}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000e80)=""/4096, 0x20001e80}], 0x1}}], 0x1, 0x0, 0x0)

06:49:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0x7a00000000000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:49:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x8, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:49:57 executing program 1:
r0 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5ebb, 0x44000)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80000, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1864.582589][T22566] binder_alloc: 22564: binder_alloc_buf, no vma
06:49:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:49:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x0, 0xfdfdffff00000000}}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1864.647824][T22571] 9pnet: Insufficient options for proto=fd
[ 1864.687281][T22576] 9pnet: Insufficient options for proto=fd
06:49:57 executing program 1:
rt_sigpending(&(0x7f0000000040), 0x8)
r0 = gettid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000002e5ffff65f6302bd86e7be410b200000000000000731963793bbadc3e0900000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14)
setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4)
sendto(r2, &(0x7f0000000380)="a0", 0x1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000600)="c3", 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000340)="b9", 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:49:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x9, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1864.792496][T22581] binder_alloc: 22579: binder_alloc_buf, no vma
06:49:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe09, 0x0, &(0x7f00000003c0)})

06:49:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1864.907155][T22588] 9pnet: Insufficient options for proto=fd
[ 1864.923760][T22593] 9pnet: Insufficient options for proto=fd
06:49:58 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0xfffffffffffffff9, &(0x7f0000000080)={{}, {r3, r4+10000000}}, 0x0)
tkill(r0, 0x1000000000016)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc)
syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0xa, &(0x7f0000000980)=[{&(0x7f00000001c0)="d78b86528a7abc9afb4ae2681027b3d282ee1ae7c2eb42456b70fefd1465daf3eeac3a9c68dcb4ab5b2eb36c021fa32276c25300bcf0c7ad0944cfd47c2f5ed76715748eef5a93e00fc815ac81f2e118a7d417cb8ea272e8985dd00ed4e98c0fc5932f", 0x63, 0x3e09}, {&(0x7f0000000240)="f1166f497ff8193042e0d4fa8be8d9daf029423d3ba16bf936fbec3d65e055d153d1c24e3409501e237d1ab7c54e0af98c3de91f713ad5e83b9f605768125d7c3dbef6cfa8aeb4e7a72c619da75920a3300dee71e738d04de6b2e4dd88da8608b993fc8fc1c542d25f6eee13aaa7a884dfd267fecf31e6efee5f553c78f6bf1e975e74947c3b173c46aa2f4616554a6647f926a8d08b9160fb9fad668dd84391d97ce2213b0f380ecc197578b4075c59836b30404795089edf8003effa7d74fe51c3d365725d5e6c7992782aad56a79d8c69bf7b4b18497d50eea6fb66f6efe02e6dde20db716e5e38e90269ba19d4b5b7246151", 0xf4, 0x1}, {&(0x7f0000000340)="7640b108b43cbea08f42a0c0b975e829c38a89a51b7298124dedae9d749a24042ee596b8190852905c6e970cab1d2795e26dc5129cd3a4e033e1e2155902561743c8ee48e0d98d3de7781240", 0x4c, 0x5}, {&(0x7f00000003c0)="790290dc9eb14f3d064770880cdc61c736937019b7e5a113113fc8cbc29660b021550a677879e316dd330bf86d478bd7fe0e52b9fc4358a82b364f0ae334eb9438f9427cf96c44d4c94e7527f6e55b530c550146a7689ee589235c78d62c82b420dd88b69e05f4d8e4f13b0d803b1dfc243a46b281ec78d111a9daa24b6b367b6e39eb1619b5ae25e2131d395e53492c80c11a08ca0849ae31336b789a110a84b2624406f8657266ec2bf83433e4d1ca4187883a127b39aedba67ddf294b74", 0xbf}, {&(0x7f0000000480)="2caa7c7565d017dc2f8ca8493de95b664da99f6421a468d40362c616f1706805eb5df2a08c2defaa8feeb8f3b47a78f7fe708587419bb4e7529cd8d5f09f206d3a43725df922ad419ec4b46b1900261da9696e4828458397c53aa126bcb356f2860d0d473ab5092876b5817527ccb5ad83343501b126b0329596d08b4b3cd96d7e2e9067d6af614b47491075b8384ba21af9bb707ad6c59e3f7cf63d63efb78fa16f3270d540565e0609bcda71844560ca37ab44602a212be3c680030caeb1501d5fc1ff0930dfc361f69905985faa96f0c56229be4d8075a893", 0xda, 0x5}, {&(0x7f0000000580)="da0f2cd319de27e94e158cdf27283474ab74b8446eace7ec2e23c5f2b97a5a10414cba2780cf23c8e85368a67b91dd388a17f508ddfbc533d62a35b3fc64a77e9626ef52c7a0cecaf242f584d09043765abc2b898e96a9c463a36f1715cb64e762a8f8408d12f4985b501493902f620dfbfde84623e537cb44df27042b4d13cc47dd086d2c73682e7e54a9794d0fc58a92b92a", 0x93, 0x3}, {&(0x7f0000000640)="551907ff9790998d3758c86a7821de77aa188824517fbe1084e2cb961b0bc04ba05256ea9be021402cf986b32665750f67561ad459a2b2aefb3b98d7b60f285ec741e9fe2876a86ab63dcd71ad03e2d4d3bd", 0x52, 0xf}, {&(0x7f00000006c0)="65cb579af0db8291cbef6bba13d750b532dbc8b4e9940e62a94e811dfe6ba5a94561dc0a2b9d427e2c1d0c599cafc5c5aacae311686a7873a5f32b22eb275d72ec069e37213e7ec0303f021b9e342e663145f1b498443d7e05ae55afca9268ecd9aa537d5587fb7c3503a96385b55fbc73687406ea2ba92a910413c30926d869d88649af3ef83ffe6b5b0d897162b95d0014c4748e1d105f919abc6babffadd60077caf4944619e152fb237c3245585d7b2664a67c06cf91fffe081521ced30cb0bc15f9b4684a39f65f95f21c0aa7900d35e0bf2c65a1787494044e6a68717c1e7861069ccb1aac0c5b66af", 0xec, 0x7a}, {&(0x7f00000007c0)="8594f797815cacaa1cdced000744d46d1f0f967670378aaf6cc06b38ac14680fa814cd34e6e8262b8eae16547158bff14c84c5f24bbdb48dd3acfb084c6a99e49d2187def754b89efcd9e7f18d906415741829c4c252ec22f4583c364dfc383cb99e2956210465445d81aedcd9d9857c5286ed19998964dc9dab4614c3f8680a34ae23b0aaae1d1bc9230ca4609698cbdde42485a2465f7d30a6a78da1", 0x9d, 0x2}, {&(0x7f0000000880)="a3e6247f7940b42233eaeea9411975061030e35bfdc64da5cb6a0de91816aa25c955dfa7bcd4ef07408a0815931c9bf6e661b00e615be5014917660e48f8799c045a92da622d8cc7d87ac0e63090ee8c40dbe257d894e5e54df7b5b015182a7296ed20da68ba48baaed6bee6b78d938f271ae9e302e4466621e6bc7f86a834e8f52f470f92385687436d5f0862fffe69140828532515623cb9e767264867591f95fd6cafc86b83b21774c96026871fb055a0bf6edbca4b94f4706437d27d0b32bd0be8fd2be0be078ee7ec14be4b6918c1dc183c9413b48aa58ec2", 0xdb, 0x401}], 0x2000, &(0x7f0000000a80)='/dev/snd/pcmC#D#c\x00')

06:49:58 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xa, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1864.966868][T22595] binder_alloc: 22594: binder_alloc_buf, no vma
06:49:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe45, 0x0, &(0x7f00000003c0)})

06:49:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:58 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xb, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1865.059954][T22600] 9pnet: Insufficient options for proto=fd
[ 1865.084500][T22604] 9pnet: Insufficient options for proto=fd
[ 1865.172321][T22608] binder_alloc: 22607: binder_alloc_buf, no vma
[ 1865.230455][T22613] 9pnet: Insufficient options for proto=fd
[ 1865.251701][T22614] 9pnet: Insufficient options for proto=fd
06:49:58 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:49:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:49:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:49:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe5d, 0x0, &(0x7f00000003c0)})

06:49:58 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xc, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1865.624761][T22623] binder_alloc: 22620: binder_alloc_buf, no vma
[ 1865.646005][T22622] 9pnet: Insufficient options for proto=fd
[ 1865.658567][T22625] binder_alloc: 22620: binder_alloc_buf, no vma
06:49:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2, &(0x7f00000003c0)})

[ 1865.685086][T22628] 9pnet: Insufficient options for proto=fd
06:49:58 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xd, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1865.839395][T22635] 9pnet: Insufficient options for proto=fd
[ 1865.848882][T22633] binder_alloc: 22632: binder_alloc_buf, no vma
[ 1865.864642][T22637] 9pnet: Insufficient options for proto=fd
06:50:01 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioprio_get$pid(0x1, r0)

06:50:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:01 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xe, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x3, &(0x7f00000003c0)})

06:50:01 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

[ 1868.093242][T22646] binder_alloc: 22641: binder_alloc_buf, no vma
[ 1868.139375][T22648] 9pnet: Insufficient options for proto=fd
06:50:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4, &(0x7f00000003c0)})

06:50:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1868.196012][T22654] 9pnet: Insufficient options for proto=fd
06:50:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:01 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0xf, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:01 executing program 1:
r0 = gettid()
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1868.353791][T22660] binder_alloc: 22658: binder_alloc_buf, no vma
06:50:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x5, &(0x7f00000003c0)})

06:50:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:01 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x10, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:01 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x2)

[ 1868.461006][T22668] 9pnet: Insufficient options for proto=fd
[ 1868.483439][T22672] 9pnet: Insufficient options for proto=fd
06:50:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6, &(0x7f00000003c0)})

[ 1868.637713][T22679] 9pnet: Insufficient options for proto=fd
[ 1868.684184][T22682] 9pnet: Insufficient options for proto=fd
06:50:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:02 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x8000, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000380)=0x1000, 0x4)
r1 = gettid()
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x82, 0x0)
r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x882)
renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x4)
fcntl$setflags(r2, 0x2, 0x1)
renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x7)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x900, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x3, 0x7ff, 0x58d}}}, ["", ""]}, 0x30}}, 0x4080)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x9, 0x7fffffff]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x33f, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}]}, 0x4c}}, 0x4000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7ffffffe)

06:50:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:02 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x11, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7, &(0x7f00000003c0)})

06:50:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1868.960023][T22693] 9pnet: Insufficient options for proto=fd
06:50:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x12, &(0x7f00000003c0)})

06:50:02 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x12, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1869.015765][T22700] 9pnet: Insufficient options for proto=fd
06:50:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x48, &(0x7f00000003c0)})

06:50:02 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ptrace$setregset(0x4205, r0, 0x203, &(0x7f0000000080)={&(0x7f0000000040)='\x00'/12, 0xc})
tkill(r0, 0x2d)

[ 1869.219453][T22714] 9pnet: Insufficient options for proto=fd
[ 1869.247937][T22720] 9pnet: Insufficient options for proto=fd
06:50:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

06:50:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:02 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x13, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4c, &(0x7f00000003c0)})

06:50:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:02 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
tkill(r0, 0x1000000000016)

[ 1869.894094][T22729] 9pnet: Insufficient options for proto=fd
[ 1869.916655][T22735] binder_alloc_new_buf_locked: 6 callbacks suppressed
[ 1869.916663][T22735] binder_alloc: 22730: binder_alloc_buf, no vma
[ 1869.938603][T22738] 9pnet: Insufficient options for proto=fd
06:50:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x14, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x60, &(0x7f00000003c0)})

06:50:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1870.091382][T22747] 9pnet: Insufficient options for proto=fd
[ 1870.109442][T22749] binder_alloc: 22748: binder_alloc_buf, no vma
[ 1870.127738][T22752] 9pnet: Insufficient options for proto=fd
06:50:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x68, &(0x7f00000003c0)})

06:50:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x15, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1870.296054][T22761] binder_alloc: 22760: binder_alloc_buf, no vma
[ 1870.309932][T22762] 9pnet: Insufficient options for proto=fd
[ 1870.327295][T22765] 9pnet: Insufficient options for proto=fd
06:50:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

06:50:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x16, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6c, &(0x7f00000003c0)})

[ 1870.801072][T22768] binder_alloc: 22766: binder_alloc_buf, no vma
[ 1870.811603][T22770] 9pnet: Insufficient options for proto=fd
[ 1870.861351][T22777] 9pnet: Insufficient options for proto=fd
06:50:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
sendmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x7, r2, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)="d8a5a9d46c435cb4cbc65aa5513e32640bc4b3910f9c2c51c478e5d78d7338f0dd799df061f1b3e15191a05f33c4b9f06592fd", 0x33}], 0x1, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x11d8}}], 0x1, 0x4000000)
tkill(r0, 0x1000000000016)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x1, 0x7, 0x9, 0x4, 'syz0\x00', 0x80000000}, 0x0, 0x2, 0xffffffff, r0, 0x5, 0xc8b, 'syz0\x00', &(0x7f0000000040)=['/dev/snd/pcmC#D#c\x00', 'lovmnet1*&+vmnet1+vboxnet1\x00', '/dev/snd/pcmC#D#c\x00', '/dev/snd/pcmC#D#c\x00', '\x00'], 0x52, [], [0x4, 0x7, 0x81, 0x7]})

06:50:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x17, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd01}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x74, &(0x7f00000003c0)})

06:50:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

[ 1872.970277][T22792] binder_alloc: 22783: binder_alloc_buf, no vma
[ 1872.978795][T22788] 9pnet: Insufficient options for proto=fd
[ 1873.013922][T22794] 9pnet: Insufficient options for proto=fd
[ 1873.023327][T22796] binder_alloc: 22783: binder_alloc_buf, no vma
06:50:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:50:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7a, &(0x7f00000003c0)})

06:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000340)={0x8000, &(0x7f00000002c0)="1492b0e29eb096350ee7ac4c2a75b88f87cf5bdf9b179ac39e751aa4fde7a38abeedda2f766a2392798fb14618726652d8a5bd4b85081b67f5a78cf1aefe6b7e3e239587f3e4ff913dd10efef831113be2a4dadea0eb"})
sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x9c, 0x2, 0x3, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x5}, [@typed={0x8, 0x21, @u32=0x100}, @typed={0x8, 0x8c, @uid=r2}, @typed={0x4, 0x41}, @typed={0x18, 0x5e, @str='/dev/snd/pcmC#D#c\x00'}, @generic="6a7f76bc3c6eed86ac1cc1ef28dbd6ae234de3bdcc429eae1fde9d39e285698f2672b27bc40b63a1c08c3b99466dd0af77e02413f4f86526bc01eeb981f02dc6be7039133cb32c81438073d74201c05835943f", @typed={0x8, 0x59, @fd=r1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24044080}, 0x10)

06:50:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x18, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1873.156182][T22804] binder_alloc: 22803: binder_alloc_buf, no vma
06:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1873.250087][T22814] 9pnet: Insufficient options for proto=fd
06:50:06 executing program 1:
r0 = gettid()
timer_create(0x7, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {r2, r3+30000000}}, 0x0)

06:50:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x300, &(0x7f00000003c0)})

[ 1873.299361][T22817] 9pnet: Insufficient options for proto=fd
06:50:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

[ 1873.360734][T22821] binder_alloc: 22820: binder_alloc_buf, no vma
[ 1873.410690][T22826] binder_alloc: 22820: binder_alloc_buf, no vma
06:50:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x19, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0))
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0)
tkill(r0, 0x1000000000016)
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101040)

[ 1873.553229][T22833] 9pnet: Insufficient options for proto=fd
[ 1873.562226][T22834] 9pnet: Insufficient options for proto=fd
06:50:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
tkill(r3, 0x1000000000016)

06:50:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x500, &(0x7f00000003c0)})

06:50:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x1a, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2})

[ 1873.816942][T22841] 9pnet: Insufficient options for proto=fd
[ 1873.837488][T22843] binder_alloc: 22836: binder_alloc_buf, no vma
06:50:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2})

[ 1873.882362][T22845] 9pnet: Insufficient options for proto=fd
06:50:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x1b, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x600, &(0x7f00000003c0)})

06:50:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1874.016170][T22855] 9pnet: Insufficient options for proto=fd
[ 1874.038450][T22858] 9pnet: Insufficient options for proto=fd
06:50:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x1c, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x700, &(0x7f00000003c0)})

[ 1874.207740][T22866] 9pnet: Insufficient options for proto=fd
[ 1874.232134][T22868] 9pnet: Insufficient options for proto=fd
06:50:09 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040))
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{<r2=>0x0}, {}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000001c0)={r2, 0x1})
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x4)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
tkill(r0, 0x1000000000016)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x3, 0x2)

06:50:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
tkill(r3, 0x1000000000016)

06:50:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:09 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1200, &(0x7f00000003c0)})

06:50:09 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x1d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:10 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
sendfile(r1, r1, &(0x7f0000000040), 0x400)

[ 1876.937547][T22880] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1876.937554][T22880] binder_alloc: 22873: binder_alloc_buf, no vma
[ 1876.954102][T22881] 9pnet: Insufficient options for proto=fd
06:50:10 executing program 1:
r0 = gettid()
timer_create(0xfffffffffffefffe, &(0x7f0000001200)={0x0, 0x10, 0x0, @tid=r0}, &(0x7f0000000100))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040))
ptrace$peekuser(0x3, r0, 0xffffffff)
tkill(r0, 0x1000000000016)

06:50:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2000, &(0x7f00000003c0)})

[ 1877.007091][T22885] 9pnet: Insufficient options for proto=fd
06:50:10 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x1e, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1877.154024][T22892] binder_alloc: 22890: binder_alloc_buf, no vma
[ 1877.190831][T22898] 9pnet: Insufficient options for proto=fd
06:50:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x3f00, &(0x7f00000003c0)})

[ 1877.209810][T22901] 9pnet: Insufficient options for proto=fd
[ 1877.318112][T22906] binder_alloc: 22905: binder_alloc_buf, no vma
06:50:13 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
tkill(r3, 0x1000000000016)

06:50:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x21, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2})

06:50:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4000, &(0x7f00000003c0)})

[ 1880.031514][T22912] 9pnet: Insufficient options for proto=fd
[ 1880.063653][T22914] binder_alloc: 22913: binder_alloc_buf, no vma
[ 1880.076366][T22916] 9pnet: Insufficient options for proto=fd
06:50:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4800, &(0x7f00000003c0)})

06:50:13 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {r1, r2+10000000}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1880.242596][T22928] binder_alloc: 22924: binder_alloc_buf, no vma
[ 1880.254491][T22927] 9pnet: Insufficient options for proto=fd
[ 1880.293376][T22931] 9pnet: Insufficient options for proto=fd
06:50:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4c00, &(0x7f00000003c0)})

06:50:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x23, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1880.439427][T22941] 9pnet: Insufficient options for proto=fd
[ 1880.440975][T22940] binder_alloc: 22937: binder_alloc_buf, no vma
[ 1880.473891][T22942] 9pnet: Insufficient options for proto=fd
06:50:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x24, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:16 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6000, &(0x7f00000003c0)})

[ 1883.153375][T22949] 9pnet: Insufficient options for proto=fd
[ 1883.154887][T22950] binder_alloc: 22948: binder_alloc_buf, no vma
[ 1883.189895][T22952] 9pnet: Insufficient options for proto=fd
06:50:16 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
timer_create(0x4, &(0x7f0000000040)={0x0, 0x39, 0x0, @tid=r0}, &(0x7f0000000080))

06:50:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x25, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1883.249674][T22956] binder_alloc: 22948: binder_alloc_buf, no vma
06:50:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2})

06:50:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d0000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:16 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6800, &(0x7f00000003c0)})

06:50:16 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x9000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, ')em0'}}, {@subj_user={'subj_user', 0x3d, 'securityvboxnet0posix_acl_accessposix_acl_accesssystem'}}, {@fowner_lt={'fowner<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/pcmC#D#c\x00'}}]}})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1883.367380][T22964] 9pnet: Insufficient options for proto=fd
[ 1883.419619][T22970] binder_alloc: 22967: binder_alloc_buf, no vma
[ 1883.431494][T22972] 9pnet: Insufficient options for proto=fd
06:50:16 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6c00, &(0x7f00000003c0)})

[ 1883.573463][T22980] binder_alloc: 22979: binder_alloc_buf, no vma
06:50:19 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:19 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x26, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:19 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x31f, 0x40, 0x380000000000, 0x6, 0x6, @random="ac10b1c8bfad"}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2})

06:50:19 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7400, &(0x7f00000003c0)})

[ 1886.280244][T22987] 9pnet: Insufficient options for proto=fd
[ 1886.290016][T22990] binder_alloc: 22984: binder_alloc_buf, no vma
06:50:19 executing program 1:
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8001, 0x400000)
r0 = gettid()
timer_create(0x1, &(0x7f0000000380)={0x0, 0x200000012, 0x1, @tid=r0}, &(0x7f00000003c0))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1886.353926][T22995] 9pnet: Insufficient options for proto=fd
06:50:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xfd', 0x2})

06:50:19 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x27, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:19 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7a00, &(0x7f00000003c0)})

[ 1886.541366][T23010] binder_alloc: 23007: binder_alloc_buf, no vma
[ 1886.562798][T23011] 9pnet: Insufficient options for proto=fd
06:50:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff', 0x2})

[ 1886.612804][T23016] 9pnet: Insufficient options for proto=fd
06:50:22 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1000000, &(0x7f00000003c0)})

06:50:22 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x28, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xff', 0x2})

[ 1889.409448][T23026] binder_alloc: 23025: binder_alloc_buf, no vma
[ 1889.431003][T23023] 9pnet: Insufficient options for proto=fd
[ 1889.449616][T23026] binder: 23025:23026 ioctl c0306201 20000440 returned -14
06:50:22 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:22 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x29, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1889.474893][T23030] 9pnet: Insufficient options for proto=fd
[ 1889.512181][T23034] binder: 23025:23034 ioctl c0306201 20000440 returned -14
06:50:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\xff', 0x2})

06:50:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2000000, &(0x7f00000003c0)})

06:50:22 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x6eb, 0x10}, 0xc)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1889.669476][T23043] 9pnet: Insufficient options for proto=fd
[ 1889.711000][T23050] 9pnet: Insufficient options for proto=fd
[ 1889.731009][T23051] binder_alloc: 23045: binder_alloc_buf, no vma
[ 1889.746736][T23051] binder: 23045:23051 ioctl c0306201 20000440 returned -14
06:50:22 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2a, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1889.776434][T23054] binder: 23045:23054 ioctl c0306201 20000440 returned -14
[ 1889.903747][T23057] 9pnet: Insufficient options for proto=fd
[ 1889.912736][T23058] 9pnet: Insufficient options for proto=fd
06:50:25 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

06:50:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff', 0x2})

06:50:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x3000000, &(0x7f00000003c0)})

06:50:25 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000002c0)=0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={<r3=>0x0, 0x2a, "ed094a7548abb633e816c738572befbac61f580c14ddbef59fd7482f0cd49db796194d1608f096a2f671"}, &(0x7f00000000c0)=0x32)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r3, 0xc6, "7668533184ee9de9170f06b1402a17e4e2482635457aed984a3f4af4d64070c3489d147df267f51b0e1a5b790b2fff70a7045060de7890788efbb89adbf73a4f1b939cce07c54055238c573f36f94e9c319235c1d1228e6a0380c6cc978f30dd896f856de4a6d3ae713ca27ff37f841de6f7e25f6a877085416e571c7b5a6675119c585080cc091259dc7398d2dee56f600c2f2e4a1082f157cccac6b682893597e00fe836533efc175ac149e99f98d12750171931ef9c238f49cae1a55b9055ba35c2ec3599"}, &(0x7f0000000100)=0xce)
tkill(r1, 0x1000000000016)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0)

06:50:25 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2b, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1892.537469][T23066] 9pnet: Insufficient options for proto=fd
[ 1892.557685][T23069] binder_alloc: 23059: binder_alloc_buf, no vma
06:50:25 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x7d924967, @mcast2, 0x3}}, [0x2, 0x3, 0x78b1, 0x1, 0xfffffffffffffeff, 0x1f, 0x6, 0x8, 0x9, 0x9, 0xff, 0xa0cf, 0x5, 0x2]}, &(0x7f0000000140)=0x100)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1892.588128][T23070] 9pnet: Insufficient options for proto=fd
[ 1892.598216][T23069] binder: 23059:23069 ioctl c0306201 20000440 returned -14
06:50:25 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1892.651550][T23074] binder: 23059:23074 ioctl c0306201 20000440 returned -14
06:50:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:25 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4000000, &(0x7f00000003c0)})

[ 1892.770018][T23081] 9pnet: Insufficient options for proto=fd
06:50:25 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
ptrace$getregset(0x4204, r0, 0x207, &(0x7f00000002c0)={&(0x7f0000000140)})
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
tkill(r0, 0x1000000000016)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000080)="3443982a0dd2738625f93c98c8dfad70dffc9a6368ebf3e78a69ca85a5f12258b0377e1accef359669eeb4001a1b674de980e0b176cb873f5c0d00f5f43c7278d1a1226452d9d6dbc763049a559564d1d977636930c47911c2e2cde3864ee12a", &(0x7f00000001c0)="064beaa1c830e4d5dbb89790ba3ccca0a8cdd99fca3bc7b39d8cd99a453d9797aed2d6f129b07504c10e62083cbeff238b606b76a1b51226b7926460660d0dfb005c03cf935200b4b0432841556d2105ce116ac5c3fbf4fa6ef84c39e92dc3e3e15e5aca24f9a6212575a6c4711f5fe86189c39f977179ae04df4c3876d7c9ede3ce5cf614b63187809c10752e4292daadf54279bc6f5128cd5d781d250f77e425c55f75fa4180803d7406185c45a4a4a4593b1c8409175108628e9630f915947a725021472687812447efdac2f1815ecf31e52125328d7dfecbfcc0"}}, &(0x7f0000000100))

[ 1892.811364][T23085] 9pnet: Insufficient options for proto=fd
[ 1892.894958][T23089] binder_alloc: 23088: binder_alloc_buf, no vma
[ 1892.934008][T23089] binder: 23088:23089 ioctl c0306201 20000440 returned -14
[ 1892.978568][T23095] binder: 23088:23095 ioctl c0306201 20000440 returned -14
06:50:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

06:50:26 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x5000000, &(0x7f00000003c0)})

[ 1893.486528][T23101] binder_alloc: 23098: binder_alloc_buf, no vma
[ 1893.496310][T23100] 9pnet: Insufficient options for proto=fd
[ 1893.516559][T23101] binder: 23098:23101 ioctl c0306201 20000440 returned -14
[ 1893.528535][T23104] 9pnet: Insufficient options for proto=fd
06:50:26 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2e, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000060}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1893.590595][T23108] binder: 23098:23108 ioctl c0306201 20000440 returned -14
06:50:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6000000, &(0x7f00000003c0)})

06:50:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1893.721258][T23112] 9pnet: Insufficient options for proto=fd
[ 1893.735370][T23117] binder_alloc: 23114: binder_alloc_buf, no vma
[ 1893.750156][T23117] binder: 23114:23117 ioctl c0306201 20000440 returned -14
[ 1893.772360][T23119] 9pnet: Insufficient options for proto=fd
[ 1893.785969][T23120] binder_alloc: 23114: binder_alloc_buf, no vma
[ 1893.803054][T23120] binder: 23114:23120 ioctl c0306201 20000440 returned -14
06:50:26 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x2f, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7000000, &(0x7f00000003c0)})

[ 1893.956059][T23125] binder_alloc: 23123: binder_alloc_buf, no vma
[ 1893.976730][T23126] 9pnet: Insufficient options for proto=fd
[ 1893.993315][T23125] binder: 23123:23125 ioctl c0306201 20000440 returned -14
[ 1893.997142][T23127] 9pnet: Insufficient options for proto=fd
[ 1894.016584][T23129] binder: 23123:23129 ioctl c0306201 20000440 returned -14
06:50:29 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x6c, 0x1baf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00')
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
tkill(r0, 0x1000000000016)

06:50:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:29 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x12000000, &(0x7f00000003c0)})

06:50:29 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x30, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:29 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

[ 1895.947054][T23134] 9pnet: Insufficient options for proto=fd
[ 1895.961718][T23138] binder_alloc: 23131: binder_alloc_buf, no vma
[ 1895.985613][T23138] binder: 23131:23138 ioctl c0306201 20000440 returned -14
[ 1895.996541][T23140] 9pnet: Insufficient options for proto=fd
06:50:29 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x31, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1896.033629][T23145] binder: 23131:23145 ioctl c0306201 20000440 returned -14
06:50:29 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x20000000, &(0x7f00000003c0)})

06:50:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x2})

06:50:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1896.277406][T23156] binder_alloc: 23154: binder_alloc_buf, no vma
[ 1896.278218][T23155] 9pnet: Insufficient options for proto=fd
[ 1896.297289][T23156] binder: 23154:23156 ioctl c0306201 20000440 returned -14
06:50:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1896.344481][T23159] 9pnet: Insufficient options for proto=fd
[ 1896.367591][T23161] binder: 23154:23161 ioctl c0306201 20000440 returned -14
06:50:29 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x32, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1896.498800][T23165] 9pnet: Insufficient options for proto=fd
[ 1896.519170][T23167] 9pnet: Insufficient options for proto=fd
06:50:32 executing program 1:
r0 = gettid()
timer_create(0x80000, &(0x7f0000066000)={0x0, 0x200000000001a}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/83, 0x53}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/164, 0xa4}], 0x5, &(0x7f0000000480)=[{&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000440)=""/58, 0x3a}], 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:32 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x3f000000, &(0x7f00000003c0)})

06:50:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000010}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:32 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x33, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:32 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

[ 1899.063130][T23173] binder_alloc: 23169: binder_alloc_buf, no vma
[ 1899.085088][T23173] binder: 23169:23173 ioctl c0306201 20000440 returned -14
[ 1899.089394][T23170] 9pnet: Insufficient options for proto=fd
[ 1899.121286][T23180] binder: 23169:23180 ioctl c0306201 20000440 returned -14
[ 1899.127572][T23181] 9pnet: Insufficient options for proto=fd
06:50:32 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x40000000, &(0x7f00000003c0)})

06:50:32 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x34, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1899.291243][T23187] binder_alloc: 23185: binder_alloc_buf, no vma
[ 1899.313828][T23187] binder: 23185:23187 ioctl c0306201 20000440 returned -14
[ 1899.322400][T23189] 9pnet: Insufficient options for proto=fd
[ 1899.346165][T23193] binder: 23185:23193 ioctl c0306201 20000440 returned -14
[ 1899.372961][T23194] 9pnet: Insufficient options for proto=fd
06:50:32 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x35, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:32 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x48000000, &(0x7f00000003c0)})

[ 1899.502796][T23197] binder_alloc: 23196: binder_alloc_buf, no vma
[ 1899.521922][T23197] binder: 23196:23197 ioctl c0306201 20000440 returned -14
[ 1899.549433][T23201] binder: 23196:23201 ioctl c0306201 20000440 returned -14
[ 1899.559954][T23199] 9pnet: Insufficient options for proto=fd
[ 1899.581050][T23202] 9pnet: Insufficient options for proto=fd
06:50:35 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
socketpair(0x9, 0x6, 0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$llc(r2, &(0x7f0000000880)={0x1a, 0x305, 0x3, 0x6, 0x5, 0x1, @local}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8)
r4 = getegid()
r5 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xa251, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xa, 0x0, 0x5, 0x101, 0xc, 0x1, 0x8, [], 0x0, 0xffffffffffffff9c, 0x3, 0x3}, 0x3c)
r7 = open(&(0x7f0000000400)='./file0\x00', 0x100, 0x4)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
r9 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/current\x00', 0x2, 0x0)
r10 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10)
r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x181080, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
r13 = getgid()
r14 = geteuid()
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000001c0)="d2ee874edfb2619a1e92b08b1a74e9c11e8e06e982283a1172c0fab9dbb94d1a36b6c27e268c0c54e59440adf528e291db2c4f6a91ed5e3870e82418c6f8da9ee8cbecd7dc1215f8a773cf1e2b2f8c30d1aa483581946d5e828ce034a45c6a8011a7f6ad50b7a79442de65e4ec0c9293d99f95a5c29467ac4a0ba19a6e486bed45916b91c469d59d82f960b31fddf43aacdc8a2427f7b2463cd7aff0124cae039456c649d46918eaec1caa546f6657", 0xaf}], 0x1, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r8]}}, @rights={{0x1c, 0x1, 0x1, [r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, r15}}}], 0xc8, 0x40010}, 0x20004004)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:35 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4c000000, &(0x7f00000003c0)})

06:50:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x36, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1902.171003][T23211] binder_alloc: 23203: binder_alloc_buf, no vma
[ 1902.185192][T23210] 9pnet: Insufficient options for proto=fd
[ 1902.224234][T23211] binder: 23203:23211 ioctl c0306201 20000440 returned -14
[ 1902.238600][T23215] 9pnet: Insufficient options for proto=fd
[ 1902.255472][T23217] binder: 23203:23217 ioctl c0306201 20000440 returned -14
06:50:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x37, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x60000000, &(0x7f00000003c0)})

06:50:35 executing program 1:
prctl$PR_GET_KEEPCAPS(0x7)
r0 = gettid()
r1 = semget$private(0x0, 0x7, 0x1)
semop(r1, &(0x7f0000000140)=[{0x3, 0x0, 0x1000}, {0x4, 0x9, 0x1000}, {0x1, 0x800, 0x1800}, {0x0, 0xb8, 0x1800}], 0x4)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)="6159e02394a4e5dbd4a257ced9dfce756ad3d565ad993a171dcd3aa5a09eb2390a20b3a7f770b60aa6ddf870d7a941c05023ea848695673744f6e0f72bb732704ba157fa2ceef6e49f7485b977fc70420b985a8f31380a5abe1dedee9bdd6f1058d6180931f62dda7965fd20160765", 0x6f)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x80, 0x0)
recvfrom$inet6(r3, &(0x7f0000000040)=""/43, 0x2b, 0x40000000, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ptrace$setsig(0x4203, r0, 0x2c78, &(0x7f00000001c0)={0x39, 0x6, 0xfffffffffffffff9})
tkill(r0, 0x1080000000014)

[ 1902.449818][T23224] 9pnet: Insufficient options for proto=fd
[ 1902.459387][T23227] binder_alloc: 23226: binder_alloc_buf, no vma
[ 1902.479972][T23227] binder: 23226:23227 ioctl c0306201 20000440 returned -14
06:50:35 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340)="bf5aecba1cffb64402dc026bc408c46298990bd7032668be92351a02f211edb6c7f47c8fe61e109603e12c90b36b263024f795d914fcee671669991c9274e5ee2f3b8ad9c687ecd96d13576d1fc5fa2e5d2165a2712e75647bbf55966ad9bd8fb11a5130eeb9c6068e7a9bc64950fa0df784788d8fb4dc3c9ca1b8bf62d2277c79f5c7fa9f3f9c117ceea17d2ac8a014d1a17cac6402f0c8ce2b0f1ecd4d11ad15110034fe1b9175b7e32ba241fbe8af2d7d05cf2bf4928c867f962bad37b2fc7a45769e8ceb8eb22f420baac0aebf8c9b07c0a2b76a907e964d887c0204720b1024e79547652e90a428da", &(0x7f0000000440)="c9a80b30685bf43a12650d9da259c8905df53a20a62cb50ddf7c45132475123dc74497d81dc11dfe1fb77171c2f6463b264e0616d8dcb3cc12a64d40aa506e2813851be7594ec75cad2f390e493f08347bd9397488d9b7e4791597b97970e93011b900fcf8d5a244ac88c78f71608a9ced9feaa9887e4f96fe0c2cfe978609e07030cb5e16657a03067d56059e49f72bda9ad87f3ba2d7620423c895f7dc7c060b0fca0635e8616f47898ec92f7a4557f797ecf3"}}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6de7, 0x80)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
timer_create(0x3, &(0x7f0000000600)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000540)="3bb5af56922a802434fb2e3ba533a346242cc0ea8d949c5c5472018b4db42d998f110c554c2efa75720995f7c603c9a1c0184e4b09619458f57fe4019849ccb07fa7f812b878e4b7534ab6ae8a1135e578590de742c84c3f91db74a0a1bb9644892610a07c3eb7613305f597e99c6e9b254f80620df547dbebd68b050b4ab7845d1316f72a1cd013ecb714d55888af65c9fa36684efe8538f6818ba4b755914247018998f696372447eefc848a9a0a5f839551b51e5cfe926e59509f", &(0x7f0000000140)="8c62b28a5062f43a4b55dffb6f4e48b49ce5374e3f3f8555b851"}}, &(0x7f0000000640))
r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000040)={0x7, 0x0, 0x100, 'queue1\x00', 0x7})
clock_gettime(0x8000000000000, &(0x7f0000000500)={<r4=>0x0, <r5=>0x0})
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x4, 0x1)
timer_settime(r1, 0x6, &(0x7f0000000100)={{r4, r5+10000000}, {0x77359400}}, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000680)={0x8, <r6=>0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000006c0)={0x3, r6})
tkill(r0, 0x1000000000016)
accept4$ax25(r2, &(0x7f0000000200)={{0x3, @null}, [@null, @default, @remote, @rose, @rose, @null]}, &(0x7f0000000280)=0x48, 0x80800)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000002c0)={0x20, [0xfffffffffffffffd, 0x200, 0x2, 0x5d2a0d76, 0x44, 0x5, 0x200, 0x100, 0x3f, 0x7f, 0x6359, 0x1000, 0x7, 0x9, 0x101, 0x100000000, 0x2, 0x3ff, 0x7fff, 0xff, 0x61, 0x80, 0x8, 0x4f5, 0x1, 0x2, 0x100000000, 0x5, 0x4, 0xc85e, 0x0, 0xf36b, 0x1f, 0x8, 0x6, 0x6, 0x5, 0x1, 0xdcc, 0x7f, 0x3da9, 0x2, 0x3, 0xb6c4, 0x1000, 0x400, 0x8, 0x3], 0xf})

[ 1902.504528][T23232] 9pnet: Insufficient options for proto=fd
[ 1902.526518][T23235] binder: 23226:23235 ioctl c0306201 20000440 returned -14
06:50:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x38, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x68000000, &(0x7f00000003c0)})

06:50:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1902.709653][T23243] binder_alloc: 23241: binder_alloc_buf, no vma
[ 1902.736478][T23243] binder: 23241:23243 ioctl c0306201 20000440 returned -14
06:50:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x39, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1902.761973][T23245] 9pnet: Insufficient options for proto=fd
[ 1902.778682][T23248] 9pnet: Insufficient options for proto=fd
[ 1902.787332][T23247] binder: 23241:23247 ioctl c0306201 20000440 returned -14
[ 1902.924082][T23251] 9pnet: Insufficient options for proto=fd
[ 1902.934842][T23252] 9pnet: Insufficient options for proto=fd
06:50:36 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6c000000, &(0x7f00000003c0)})

06:50:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:36 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3a, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1903.035135][T23260] binder_alloc: 23258: binder_alloc_buf, no vma
[ 1903.051441][T23257] 9pnet: Insufficient options for proto=fd
[ 1903.068433][T23260] binder: 23258:23260 ioctl c0306201 20000440 returned -14
[ 1903.099208][T23263] 9pnet: Insufficient options for proto=fd
[ 1903.137869][T23265] binder: 23258:23265 ioctl c0306201 20000440 returned -14
06:50:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:38 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x101, 0x5c, &(0x7f0000000040)="88711d1cc36b10c53153073dfb5b787a41358a8a538a4837ebc685fe06dbd9ce940ccf8f4a780ebb2967a6d24513ec77f501203e09a8836df55b11594dd970262722d9ce3260bf1fe244c5692449e8c98ef92fa94faa0c3e7e1811bf"})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
write$vnet(r1, &(0x7f0000000280)={0x1, {&(0x7f0000000100)=""/83, 0x53, &(0x7f00000001c0)=""/179, 0x3, 0x7}}, 0x68)

06:50:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:38 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3b, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x74000000, &(0x7f00000003c0)})

06:50:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:38 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1905.657146][T23277] binder_alloc: 23272: binder_alloc_buf, no vma
[ 1905.671988][T23271] 9pnet: Insufficient options for proto=fd
[ 1905.695335][T23277] binder: 23272:23277 ioctl c0306201 20000440 returned -14
[ 1905.718970][T23281] 9pnet: Insufficient options for proto=fd
[ 1905.742512][T23285] binder: 23272:23285 ioctl c0306201 20000440 returned -14
06:50:38 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3c, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:50:38 executing program 1:
r0 = gettid()
timer_create(0xfffffffffffffffe, &(0x7f0000066000)={0x0, 0x800000000000012}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x1, 0x4b, 0x913}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ff0fc100eb2cdf70ff41cfe5af9407898cc99665b61f88049db76b8ef8fec6e14efc2d60791326a2cc26a0701d4f19a683c6c05b857233f41c7e37f6cde47dbf8cffd8fe37708e92efc8076557439e28c73a2cdda39a83ee8db49c0bf5d6000b0e14aec20e5da48166a4115ad6dbb77faa65cce67421518d76972cec2b157106b4c46b7ff9d0526948e7a531a653e14fccaf2e01000000a92de327b2708dfcccf0d02b3790f36399bbf25e86c03373f06a248cca2172545b25e7661a24e2b1380f72a1e5de"], 0xc9)

06:50:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7a000000, &(0x7f00000003c0)})

06:50:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1905.912022][T23294] 9pnet: Insufficient options for proto=fd
[ 1905.933467][T23295] binder_alloc: 23293: binder_alloc_buf, no vma
[ 1905.954158][T23298] 9pnet: Insufficient options for proto=fd
06:50:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1905.961719][T23295] binder: 23293:23295 ioctl c0306201 20000440 returned -14
06:50:39 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x3d, {'wfdno', 0x3d, r1}})

[ 1906.008250][T23301] binder_alloc: 23293: binder_alloc_buf, no vma
[ 1906.041626][T23301] binder: 23293:23301 ioctl c0306201 20000440 returned -14
06:50:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfdfdffff, &(0x7f00000003c0)})

[ 1906.110798][T23306] 9pnet: Insufficient options for proto=fd
[ 1906.153828][T23307] 9pnet: Insufficient options for proto=fd
[ 1906.189633][T23310] binder_alloc: 23308: binder_alloc_buf, no vma
06:50:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1906.199038][T23310] binder: 23308:23310 ioctl c0306201 20000440 returned -14
06:50:39 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Ifdno', 0x3d, r1}})

[ 1906.238698][T23312] binder: 23308:23312 ioctl c0306201 20000440 returned -14
[ 1906.362676][T23317] 9pnet: Insufficient options for proto=fd
[ 1906.391867][T23319] 9pnet: Insufficient options for proto=fd
06:50:39 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:50:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfffffdfd, &(0x7f00000003c0)})

[ 1906.519944][T23321] binder_alloc: 23320: binder_alloc_buf, no vma
[ 1906.533237][T23321] binder: 23320:23321 ioctl c0306201 20000440 returned -14
[ 1906.560975][T23324] binder: 23320:23324 ioctl c0306201 20000440 returned -14
06:50:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:41 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0xfffffffffffffffc)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:41 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Qfdno', 0x3d, r1}})

06:50:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x100000000000000, &(0x7f00000003c0)})

06:50:41 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f0000000280)=0x4)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1908.932485][T23332] 9pnet: Insufficient options for proto=fd
[ 1908.939694][T23331] binder_alloc: 23330: binder_alloc_buf, no vma
[ 1908.959381][T23336] 9pnet: Insufficient options for proto=fd
[ 1908.964644][T23331] binder: 23330:23331 ioctl c0306201 20000440 returned -14
06:50:42 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Rfdno', 0x3d, r1}})

06:50:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1909.018723][T23340] binder: 23330:23340 ioctl c0306201 20000440 returned -14
06:50:42 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x3}}}, &(0x7f0000000100)=0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x1f}, 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x200000000000000, &(0x7f00000003c0)})

06:50:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1909.145319][T23347] 9pnet: Insufficient options for proto=fd
[ 1909.176887][T23352] 9pnet: Insufficient options for proto=fd
[ 1909.192104][T23354] binder_alloc: 23349: binder_alloc_buf, no vma
[ 1909.203805][T23354] binder: 23349:23354 ioctl c0306201 20000440 returned -14
06:50:42 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
ioctl$TIOCEXCL(r2, 0x540c)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x10, 0x5, @thr={&(0x7f00000001c0)="389adc0bf5c8e15cd741656da4e376a0cc740a2946d65d1455b0a60ea93cdb244fa506b65445cf33f90c91222433748b4edb14fd27e91113bebc2856eb11c8274e2d2abaf435a96f5bbff339da48b723df909cfcf4079a68ccae6368d54700d1144c03be995e4208730bc20e3cc3a110394ba6741da3d7eea0ab93777f3be4aeabe0559ad63f32a4109b0a910d6f89358ada5f8ec36cf4eac3eb649980b7", &(0x7f0000000280)="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"}}, &(0x7f0000000140))
timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {r3, r4+30000000}}, 0x0)
timerfd_gettime(r2, &(0x7f0000000040))
tkill(r0, 0x1000000000016)

06:50:42 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Sfdno', 0x3d, r1}})

06:50:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1909.283243][T23357] binder: 23349:23357 ioctl c0306201 20000440 returned -14
06:50:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x300000000000000, &(0x7f00000003c0)})

[ 1909.356979][T23360] 9pnet: Insufficient options for proto=fd
[ 1909.393742][T23364] 9pnet: Insufficient options for proto=fd
06:50:42 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Tfdno', 0x3d, r1}})

[ 1909.456435][T23369] binder_alloc: 23368: binder_alloc_buf, no vma
[ 1909.477341][T23369] binder: 23368:23369 ioctl c0306201 20000440 returned -14
[ 1909.520713][T23370] binder_alloc: 23368: binder_alloc_buf, no vma
[ 1909.543333][T23370] binder: 23368:23370 ioctl c0306201 20000440 returned -14
[ 1909.556866][T23372] 9pnet: Insufficient options for proto=fd
[ 1909.574861][T23373] 9pnet: Insufficient options for proto=fd
06:50:42 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x400000000000000, &(0x7f00000003c0)})

06:50:42 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Vfdno', 0x3d, r1}})

[ 1909.765536][T23375] binder_alloc: 23374: binder_alloc_buf, no vma
[ 1909.771911][T23375] binder: 23374:23375 ioctl c0306201 20000440 returned -14
[ 1909.805800][T23381] 9pnet: Insufficient options for proto=fd
[ 1909.825507][T23382] 9pnet: Insufficient options for proto=fd
[ 1909.842551][T23384] binder: 23374:23384 ioctl c0306201 20000440 returned -14
06:50:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:45 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendto$unix(r1, &(0x7f0000000040)="32314285d16eff5e8684b7f149e812b49d3cd0aac6f7cf21e93c2503fc749babb74c9bd10573158abd9cb2622030444248b67a7d3a43d4a172348833f603f312069639a103c00eef049e7cf788fd7b4fb62714708a750f2d29730a4ebec2957799122832993189918c7e992d1161077da546369b0919c5934ef2eba20b868c8e3afe3f5b774565759c354373193542915cb71edb7ff43f894f2fecc9bf17", 0x9e, 0x5, 0x0, 0x0)
tkill(r0, 0x1000000000016)

06:50:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x500000000000000, &(0x7f00000003c0)})

06:50:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'bfdno', 0x3d, r1}})

06:50:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:45 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1912.380135][T23402] binder_alloc: 23394: binder_alloc_buf, no vma
[ 1912.393105][T23402] binder: 23394:23402 ioctl c0306201 20000440 returned -14
[ 1912.397069][T23400] 9pnet: Insufficient options for proto=fd
[ 1912.431606][T23405] binder: 23394:23405 ioctl c0306201 20000440 returned -14
[ 1912.459024][T23407] 9pnet: Insufficient options for proto=fd
06:50:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'dfdno', 0x3d, r1}})

06:50:45 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xb, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000180)=0x1)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x3, {0xa, 0x4e24, 0x1, @remote, 0x7}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x400, 0x0)
bind$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x1, 0x2, 0x6, 0x5, 0x3af, "2d49b1fe3e50e4561d48236fdb3504b8d9b356ee64537105d946f0910864ebb797c9dfc121e64bc4acead899dcaed46b0b8f3f4a31af13b382001c691f8cf6", 0x8}, 0x60)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000000))
tkill(r0, 0x1000000000016)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb)

06:50:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x600000000000000, &(0x7f00000003c0)})

06:50:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1912.667501][T23412] 9pnet: Insufficient options for proto=fd
[ 1912.685959][T23420] 9pnet: Insufficient options for proto=fd
06:50:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'gfdno', 0x3d, r1}})

[ 1912.713516][T23418] binder_alloc: 23416: binder_alloc_buf, no vma
[ 1912.719914][T23418] binder: 23416:23418 ioctl c0306201 20000440 returned -14
06:50:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1912.776237][T23423] binder: 23416:23423 ioctl c0306201 20000440 returned -14
06:50:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x700000000000000, &(0x7f00000003c0)})

[ 1912.845960][T23426] 9pnet: Insufficient options for proto=fd
06:50:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1912.899806][T23427] 9pnet: Insufficient options for proto=fd
06:50:46 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'qfdno', 0x3d, r1}})

[ 1912.951625][T23430] binder_alloc: 23429: binder_alloc_buf, no vma
[ 1912.971883][T23430] binder: 23429:23430 ioctl c0306201 20000440 returned -14
[ 1913.012797][T23434] binder: 23429:23434 ioctl c0306201 20000440 returned -14
06:50:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1913.084041][T23438] 9pnet: Insufficient options for proto=fd
[ 1913.111600][T23439] 9pnet: Insufficient options for proto=fd
06:50:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:46 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x1200000000000000, &(0x7f00000003c0)})

[ 1913.232115][T23445] binder_alloc: 23443: binder_alloc_buf, no vma
[ 1913.279690][T23445] binder: 23443:23445 ioctl c0306201 20000440 returned -14
[ 1913.359718][T23447] binder: 23443:23447 ioctl c0306201 20000440 returned -14
06:50:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x24}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1f4, 0x38, 0x400, 0x70bd2b, 0x25dfdbfe, {0x13}, [@nested={0x1c8, 0x12, [@generic="f8a3edcbace2450d0d0f504e3a364e90ab0bfe98b8d6b40ba9077619cf58e2373bc8233ced076f0935792a5d0120fa107709e610a734d853db0e0d0dedf179907cdb3fe0fdcfdf8a73439b8135ace4e540e3a91a4cea7577a4be730463102eb81769f23bccdf946ce50d84f1980d8c68ac8ecfca64a1e96d1ba8cce1068263d950362778532d05988dc8812c9b626a07fc5e7e90adce4ba3723dd19d1ab20474fc651ee9f36562090e15776358057a80be5caf74f34659f729fc7e2fd5d41ccac2057463fd5a9dddc44d4f1f05dd8e4ea201f565", @generic="efea8f1b6011a9228cf47ee6ef01745357911150e72b6be3b4a1e3d9e095e62b", @typed={0x8, 0x45, @fd=r1}, @generic="b938497e021f09cde72e168bb52e352b4e4724d2e4a7db1238abb943b36846e1545a05b569b3aeff805f38ff71f1c049bd8b678eb17225d456679aee7492eb701dbacf2ff439b6267b54741b8fd13aeb1ab38dcd30496067e55d4cc8a74322f378ae60a27390fd3819bedf6098aee27465b97e186d0e5783eeb5b85e5c82e1ee6164026f69ab5d3292a3a5bb599d45d1efa98791db3d30347bd5180b4f069689213816919ce6ffaf4ffce99fe3611af176467b50233c", @typed={0xc, 0x63, @u64=0x7}, @typed={0x4, 0x50}]}, @typed={0x8, 0x7f, @fd=r1}, @typed={0xc, 0x4a, @u64=0x10001}, @typed={0x4, 0x59}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x810}, 0x48000)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x163101d2, 0x5})
tkill(r0, 0x1000000000016)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080))
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000100))

06:50:48 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:50:48 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'sfdno', 0x3d, r1}})

06:50:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x2000000000000000, &(0x7f00000003c0)})

[ 1915.698825][T23455] binder_alloc: 23451: binder_alloc_buf, no vma
[ 1915.723312][T23456] 9pnet: Insufficient options for proto=fd
[ 1915.732783][T23455] binder: 23451:23455 ioctl c0306201 20000440 returned -14
06:50:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1915.777469][T23460] binder: 23451:23460 ioctl c0306201 20000440 returned -14
[ 1915.789281][T23461] 9pnet: Insufficient options for proto=fd
06:50:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x3f00000000000000, &(0x7f00000003c0)})

06:50:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x5, 0x9, 0x145, 0x0, 0x3, 0x40, 0x2, 0x8, 0x1, 0x836, 0x8, 0x9, 0xffffffff, 0x6, 0x6, 0xfff, 0x0, 0xa2a5, 0x8, 0xffff, 0x100000000, 0x7, 0x7fff, 0xfffffffffffffffb, 0x20, 0xffffffff, 0xfffffffffffffffe, 0x10001, 0x200, 0x2, 0x3, 0x80000001, 0x1ff, 0xd14d9cb, 0x6, 0x0, 0xffffffffffffff81, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0xa000, 0x7, 0x4, 0xc, 0x2, 0x8000, 0x7}, r0, 0x10, r1, 0x8)
tkill(r0, 0x1000000000016)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040))

06:50:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'ufdno', 0x3d, r1}})

06:50:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1915.989137][T23473] 9pnet: Insufficient options for proto=fd
[ 1916.012723][T23476] binder_alloc: 23469: binder_alloc_buf, no vma
06:50:49 executing program 1:
r0 = gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
recvmsg(r1, &(0x7f0000000500)={&(0x7f00000001c0), 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x4, &(0x7f0000000440)=""/145, 0x91}, 0x10000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
time(&(0x7f0000000100))
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1916.033276][T23476] binder: 23469:23476 ioctl c0306201 20000440 returned -14
[ 1916.041641][T23478] 9pnet: Insufficient options for proto=fd
[ 1916.082381][T23481] binder: 23469:23481 ioctl c0306201 20000440 returned -14
06:50:49 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:50:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w%dno', 0x3d, r1}})

06:50:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4000000000000000, &(0x7f00000003c0)})

06:50:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:49 executing program 1:
r0 = gettid()
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x3f, 0x38a, 0x6, 0x0, 0x81, "1373c523426ca2585b069f2708cf64ed97a818", 0x688, 0x7})
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000000c0)={0x7, "eeebbe677cc1559258bbf5e649f1bf6ef5cb9d287978828d9c7f11b9ea2c9a96", 0x1, 0x80, 0x59, 0xff06ff, 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1916.556397][T23493] 9pnet: Insufficient options for proto=fd
[ 1916.581452][T23497] binder_alloc: 23488: binder_alloc_buf, no vma
[ 1916.608593][T23497] binder: 23488:23497 ioctl c0306201 20000440 returned -14
[ 1916.613559][T23499] 9pnet: Insufficient options for proto=fd
06:50:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
syz_open_pts(r1, 0x2400)

06:50:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:49 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w.dno', 0x3d, r1}})

[ 1916.661228][T23502] binder: 23488:23502 ioctl c0306201 20000440 returned -14
06:50:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4800000000000000, &(0x7f00000003c0)})

06:50:49 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x8, 0x8, 0x3003, 0x7, 0x6, 0x6, 0x0, 0x3}})
timer_settime(r1, 0xfffffffffffffffe, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0)
semget(0x3, 0x3, 0x10)
socket$l2tp(0x18, 0x1, 0x1)
tkill(r0, 0x1000000000016)

[ 1916.845013][T23517] 9pnet: Insufficient options for proto=fd
[ 1916.861239][T23518] binder_alloc: 23515: binder_alloc_buf, no vma
[ 1916.885930][T23521] 9pnet: Insufficient options for proto=fd
[ 1916.898310][T23518] binder: 23515:23518 ioctl c0306201 20000440 returned -14
[ 1916.957240][T23522] binder: 23515:23522 ioctl c0306201 20000440 returned -14
06:50:50 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:50:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w/dno', 0x3d, r1}})

06:50:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x4c00000000000000, &(0x7f00000003c0)})

[ 1917.496660][T23530] binder_alloc: 23528: binder_alloc_buf, no vma
[ 1917.530032][T23531] 9pnet: Insufficient options for proto=fd
[ 1917.533818][T23530] binder: 23528:23530 ioctl c0306201 20000440 returned -14
06:50:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w\\dno', 0x3d, r1}})

[ 1917.567916][T23534] 9pnet: Insufficient options for proto=fd
[ 1917.607858][T23537] binder: 23528:23537 ioctl c0306201 20000440 returned -14
06:50:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6000000000000000, &(0x7f00000003c0)})

06:50:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1917.727697][T23547] binder_alloc: 23545: binder_alloc_buf, no vma
[ 1917.728197][T23544] 9pnet: Insufficient options for proto=fd
[ 1917.742067][T23547] binder: 23545:23547 ioctl c0306201 20000440 returned -14
[ 1917.773176][T23549] binder: 23545:23549 ioctl c0306201 20000440 returned -14
[ 1917.788362][T23550] 9pnet: Insufficient options for proto=fd
06:50:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6800000000000000, &(0x7f00000003c0)})

06:50:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x2}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1917.927486][T23555] binder_alloc: 23554: binder_alloc_buf, no vma
[ 1917.938704][T23555] binder: 23554:23555 ioctl c0306201 20000440 returned -14
06:50:53 executing program 1:
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x3c, 0x2, @thr={&(0x7f00000001c0)="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", &(0x7f0000000040)="a2f69f27a9fb0ea4cc105e4465eed8f38a02e1957b870255b1887630a4ebbd47e70795d5e60858383f988a80a89c8dbc330b441272c7d35ec41b51a685e3a35dd324d72ce5fa36532e2f4bea78a10833c60204767d590055b8bc53"}}, &(0x7f0000000100)=<r0=>0x0)
timer_delete(r0)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:50:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfIno', 0x3d, r1}})

06:50:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)})

06:50:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x3}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:53 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1920.056381][T23565] binder_alloc: 23562: binder_alloc_buf, no vma
[ 1920.075348][T23566] 9pnet: Insufficient options for proto=fd
[ 1920.087159][T23565] binder: 23562:23565 ioctl c0306201 20000440 returned -14
06:50:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1920.123385][T23573] 9pnet: Insufficient options for proto=fd
[ 1920.150736][T23577] binder: 23562:23577 ioctl c0306201 20000440 returned -14
06:50:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfQno', 0x3d, r1}})

06:50:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7400000000000000, &(0x7f00000003c0)})

06:50:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x5}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1920.339564][T23588] binder_alloc: 23584: binder_alloc_buf, no vma
[ 1920.350711][T23587] 9pnet: Insufficient options for proto=fd
[ 1920.370915][T23588] binder: 23584:23588 ioctl c0306201 20000440 returned -14
[ 1920.402106][T23589] 9pnet: Insufficient options for proto=fd
[ 1920.411983][T23590] binder: 23584:23590 ioctl c0306201 20000440 returned -14
06:50:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x7a00000000000000, &(0x7f00000003c0)})

[ 1920.544005][T23594] binder_alloc: 23593: binder_alloc_buf, no vma
[ 1920.560934][T23594] binder: 23593:23594 ioctl c0306201 20000440 returned -14
[ 1920.597014][T23595] binder: 23593:23595 ioctl c0306201 20000440 returned -14
06:50:56 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/version\x00Z\xa2\xac\x00\x00\xb8\xb5\xa2\x8a)\xae\xcb\xf8C8ZQ%\x03\x98\xce\x12\xd9\x84\xf5*\x14\x9e\xaf\x98f\xf3\xc38(\xfes\xd4\xf3\x19R\x8b\xbd\x89\xfc\xef\xb6%\xad\xacF\xdfu\"\xeb\xb2<\x98\xadi\xbd\xc8%\t\xdfoCy\x17\x02\x00\x00\x00\xca\x02\x98\x89\x05\xb6r\xc3\xa2\r\x10\xf8\x90\xb9\xf5w$4\v8N\xcaa6\xea\xe4\xfdJ\x01^\a0v\xb8\xf1\xcd\xe4^\xea\x0f\x0f\f<\xa6N\xbd\xd0\xce\xfc\r\x9e\x8e\xa9\x1d\v\xbb\xa5\x00'/160, 0x2, 0x0)
lseek(r0, 0x51, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0xfe43)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000180), 0x8)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={<r4=>0x0, 0xfff, 0x30}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x8, 0x192, 0x9}, &(0x7f0000000140)=0x10)

06:50:56 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfRno', 0x3d, r1}})

06:50:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x6}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0xfdfdffff00000000, &(0x7f00000003c0)})

06:50:56 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES16=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRESDEC, @ANYRESDEC=r0], 0x3fa)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1923.121907][T23602] 9pnet: Insufficient options for proto=fd
[ 1923.139579][T23606] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1923.139587][T23606] binder_alloc: 23598: binder_alloc_buf, no vma
[ 1923.150135][T23608] 9pnet: Insufficient options for proto=fd
06:50:56 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfSno', 0x3d, r1}})

06:50:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1923.194367][T23606] binder: 23598:23606 ioctl c0306201 20000440 returned -14
06:50:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x7}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:56 executing program 1:
r0 = gettid()
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x200080)
openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1923.252155][T23617] binder_alloc: 23598: binder_alloc_buf, no vma
[ 1923.264652][T23617] binder: 23598:23617 ioctl c0306201 20000440 returned -14
06:50:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000001e18020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000200000000000000852a627300000000000000000000000000000000000000852a62730000000000f2f600"/71], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000280)={0x0, 0x7530}, 0x10)
r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x100)
ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000080))
fstat(r2, &(0x7f00000000c0))

[ 1923.332550][T23619] 9pnet: Insufficient options for proto=fd
06:50:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x8}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1923.397936][T23627] 9pnet: Insufficient options for proto=fd
06:50:56 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x6}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:50:56 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfTno', 0x3d, r1}})

06:50:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:56 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80, 0x80800)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100), 0x4)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x802)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)

[ 1923.579969][T23638] 9pnet: Insufficient options for proto=fd
[ 1923.598057][T23641] 9pnet: Insufficient options for proto=fd
06:50:56 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfVno', 0x3d, r1}})

[ 1923.701156][T23646] 9pnet: Insufficient options for proto=fd
[ 1923.711973][T23648] 9pnet: Insufficient options for proto=fd
06:50:57 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

06:50:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x10d}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000d94753c3bf67a5d90000000000000000000000000000000000000000000018020020e57c454db6e077b0751ca03c0f16000000000800000000e10000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

06:50:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wf\\no', 0x3d, r1}})

06:50:57 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000160000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1924.011770][T23655] 9pnet: Insufficient options for proto=fd
[ 1924.046162][T23660] 9pnet: Insufficient options for proto=fd
06:50:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfbno', 0x3d, r1}})

[ 1924.151903][T23665] binder_alloc: 23664: binder_alloc_buf, no vma
[ 1924.239109][T23670] 9pnet: Insufficient options for proto=fd
[ 1924.260235][T23671] 9pnet: Insufficient options for proto=fd
06:50:59 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x0, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
tkill(r0, 0x1000000000016)

06:50:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x300}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:50:59 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fremovexattr(r0, &(0x7f0000000040)=@random={'trusted.', '/dev/binder#\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:50:59 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfgno', 0x3d, r1}})

06:50:59 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

[ 1926.607455][T23679] binder_alloc: 23675: binder_alloc_buf, no vma
[ 1926.616009][T23677] 9pnet: Insufficient options for proto=fd
[ 1926.629045][T23682] 9pnet: Insufficient options for proto=fd
06:50:59 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfqno', 0x3d, r1}})

[ 1926.658116][T23679] binder_alloc: 23675: binder_alloc_buf, no vma
06:50:59 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCNOTTY(r0, 0x5422)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x7, 0xd2, @mcast2, 0x1ff}}, 0x200, 0x2, 0x3, 0x7, 0x19}, 0x98)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001640)={<r4=>0x0, @multicast2, @dev}, &(0x7f0000001680)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8)
sendmmsg$inet6(r2, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="a0165b9ae546397860e30fd589a1", 0xe}, {&(0x7f0000000480)="d4862c25af0c06b9a07d30ec4311e1335cb33d4a85f64e481ad0abba77a3b7016fa886d26a1336b251d2e4dbb23c18c5ac8caecacdd0faa1c011d6882a5dc0b9fa895c7879bbebf1318fbe834e6a826cfc6ed9d6f9089b6abcdc2553079a4a19b651af6b6421a80e1761647d7599d7c4d53d9f815c9e3dc91d5e7bfe11a903b308866fb62c7e9b6c98d264c06841181114a0e489c8f12671a6c3b9a3ac12744a5b500b1fd4fc53798a1fadfbb1744ec32429b9908c2355005b6a2bc70de87a533cae849bb4a338d0a988020a3c5ea85bca3fd3a78afbd5b3341e25190abb", 0xde}], 0x2, &(0x7f0000000580)=[@hopopts={{0x30, 0x29, 0x36, {0x3b, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @multicast2}}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x3b, 0x12, [], [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x883b}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @generic={0x4, 0x5b, "c1f73d69cb1201eb0f25b6faefedf390fe8b9296548814d2a31dbec9095863701ee9c03808ecc63422192090070b40940dc420f82dc7aebded7a1116c88bce66f638961feb03761c6af982daed683e95147883f2886b716f16c53d"}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, [], [@ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @mcast1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3f, 0x0, [], [@pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2, 0x3, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr="1e5eea85df7fecbb59a15052c6be79e0"}]}}}], 0x1b0}}, {{&(0x7f0000000740)={0xa, 0x4e22, 0x1, @remote}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000780)="14dc33ed4e5d208cfd52bf7cb75cd366909a10022a1ce1a6bcefbf65b60a05a9632d4c81cb56602e03bc81e204800a9ad6fadbbbc4751d449985f168809e136e6913c9fe80dd49d245818503ac904d8341fb046ad05d7936b1e81fb7d35c58f92eb39a33acb023fa19dc961ead182ded1117419e0c", 0x75}, {&(0x7f0000000800)="e42e1fd931843b2dd81fa65354e004f843e3c85a31983688dd99ef988e948a49867d2f352bc04c1a485191489e151a3c3ce7bfde4e12c18d0fef2a416f544f6b028895c3e0291448a7a7f9e5417b131da2a0ec73e88c876de6e4723a718627f85c34f0e46690fff269c74a451cc899e6d1bd9bb3a23efbebcc03a4035a4d2d2f0cad33ae704a49406a89d63945902193452b2e4559cae5812226507e499e694060f9a63807d60acf1704e8d32654d67233df44bfc02035cdb74ca8a0be7adbfbe3a7f5528b8c8215d735a236860348c5cf945aa49c9fc42d79242620cd2c6c24e757a402475ba2b1b5b77b28", 0xec}, {&(0x7f0000000900)}, {&(0x7f0000000940)="2bb1ecd78be8b7ebe1681ccc89f9c6db5b5c35719fb3eccfb0d58cf708a1487dc4869eae5c8959e75650af09ea0b70e0126845eef4f8801b03baaa907f9a6e3d781f231f504ba6dbe7e5d1b3e8bd59fab0c837b182df76cf27332e3689718522199cce20bd210cc8a026acef390197b3b6b5feb7f27ea67d035e3ee7a392f1df0fdd4ca526146becbad2b18e37b0ab0f4b9d9ea8238d55547970f64dd5fad9dd5ccd0335a486b8e3cee4738d38b9e44d57dea773aa2fa942e185f6d6967c893648d4d37cca3841994b73ce8bc9f5d11d64243faddb8f6e079e6f5e375a0a93257f6d370b8ecad2ff669374908082cea348", 0xf1}, {&(0x7f0000000a40)="14d809ad12747eedb96977a7d35b5f1bc1324bc6baa5457e42bc7ae257e1bcf181ef15036dacbf7dfa8cb648be5fdd3f0c76aec78b754aaa3ca12639e54424b11dc59d23e6d72df9dc308cf5e3bff8937235f48486d41824c730828df44b7b7c197ffe400e9495f4ae0199f0195de1649e94f7b76e33c147236d", 0x7a}, {&(0x7f0000000ac0)="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", 0xfb}, {&(0x7f0000000bc0)="f54c4ece81188b63a88cfb2bcae86bea642b9af87d94a77e9703cbfff2bc575cf7c752d6422ec0eb1b50c12272629f678840385aefe465494de2060cd088236e4833264b323fab01a3b3c41f4eb73ef99c0a6f5cb4398a14ced875ff9988428e0f86bff65dac870f167abb3aafb0c0d2bf5766548be7d920ba5e90f572181dabfd0a6eaf85c7edfd0c83014692873f441495d7255c0703dc228dac395c4f081305db9015d7e5a679e0df2132aa63b750abf2b257fda22b7281a7676cc310c29200e3e0c4dd812d40da2e026282a40c04b219d2557a2a27e212e473a2f9", 0xdd}], 0x7, &(0x7f0000000d40)=[@rthdrdstopts={{0x80, 0x29, 0x37, {0x3f, 0xc, [], [@pad1, @pad1, @calipso={0x7, 0x10, {0xfffffffffffff801, 0x2, 0xd0, 0x3, [0x9]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @generic={0x4aaa, 0x29, "8edaf7c753ef1dd7a5676c0fa5d0a9504c164331ca656e30c4db22494d3fb7c0e64878224471ef69e6"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x3, 0x2, 0x0, [@mcast1, @local, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @hopopts={{0x60, 0x29, 0x36, {0xbf, 0x8, [], [@ra, @generic={0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x38, {0x5, 0xc, 0x1, 0x9, [0x6, 0x3, 0x8, 0x3f, 0x6, 0x0]}}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x5e, 0x9, [], [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x32bc, 0x31, "6a5a5786c531a3b851e9e3cfde5ec32e6308451a5d8614404bd3eb8fc9e85cd3d7a3d153a1737ed11abe0809c6bfc43a99"}]}}}, @dstopts={{0x30, 0x29, 0x37, {0xfb, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @local}]}}}], 0x230}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0x101, @local, 0x5}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000fc0)="e29faa7a466bd25b2a6f6591f2945f8196d3c5926c3df8c21844dac14e844296ea2eaf1860d67596a3752adfef6c0240f4aea7bc0f8fe0aa0e51ca1240fcc3d2e33e73656aeecd1723f718e06ee7ccdfe7094049222055e5e479449ab85c1f17e5e355f8bbbfe2ec0d90b9e722571596fe3f63a7b955ac41282dbd048e1a3187bc26c6b860943ca26c7e780f3db16d9aefc26fd389d1aee36d9f515e16e2de55e7fc09c138d2b8cbe24a8320c34c197e16092d7069aec82e5aa54fa05ec7f76458cfd3c9162936e74c", 0xc9}, {&(0x7f00000010c0)="20918af50d872811a5fd8ebc645c28856beff4d21f54ba71ce4e566e6fbe1e0c677b6635a62d3d916a2a3cbbb30ba1b5fdc5a4908053232175344d86fb13f12a2cd0b930cc780a06079db1ae28ba5d0ca7e4351256c29f3f21670f9db99218b34eb52c9d428eeb4b6c8a65508d6ac81afcc7126aac045477665fdbf6ed3f1b2f8170c19ef52d8cb21c2ad4158f453b8ad0d7cdb682cc369c1dded4c853c71f9d7c", 0xa1}], 0x2, &(0x7f00000011c0)=[@dstopts={{0x38, 0x29, 0x37, {0x3f, 0x4, [], [@ra, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr="c86e41199e2ac861af348a73cf319c9d"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff00000001}}, @hoplimit_2292={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xbb, 0x6, 0x2, 0x2, 0x0, [@rand_addr="150b931ae820b713c0f59d6bd6905af5", @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2]}}}, @dstopts={{0x70, 0x29, 0x37, {0x88, 0xa, [], [@ra={0x5, 0x2, 0x80000001}, @ra={0x5, 0x2, 0x20}, @enc_lim={0x4, 0x1, 0x8000}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xff}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x30, {0x4, 0xa, 0x4, 0x70a, [0x3, 0x5, 0x3, 0x1, 0x8]}}, @jumbo]}}}, @tclass={{0x14, 0x29, 0x43, 0xd8aa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts={{0x138, 0x29, 0x37, {0xef, 0x24, [], [@generic={0xfffffffffffff801, 0xde, "4f96d8c9f49806a31b342947f43aa43e9fa7d21def86ff85f5d72e1f3059638a485fa2d916a1ed0d2e896d21bfc64208992058b41467ee41de23e495c1d75707f91333e86f8fdfa856b5aaea8c402557118f32507d4cad6ae8120b85858a1de1b4f9c6772364b63b22552e0391752382919140633bdead2e3c0cdb6d2aa2915a4cc871686d36c6989394e80f05d4b80262b8093c4afe55acc8559d5042a6c14d02f442651ae1f1f33f662b5c4ca4a7cf3ba3bcf032df4bfe78a5c2b5f9d121394c736ac4fd6ad8837fd23a836b69263a220da4e6786de8e45d5e75f20d6d"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @ra={0x5, 0x2, 0xf41a}, @ra={0x5, 0x2, 0x9e0}, @calipso={0x7, 0x18, {0x0, 0x4, 0xfffffffffffff88f, 0xffffffffffffffff, [0x3, 0xffffffffffffe8c5]}}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0xb79}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x0, 0x8, 0x0, [@rand_addr="8026e1d7224e5c09d1f3e48de31964f4", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, @remote, @mcast1, @remote, @mcast2, @mcast1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, @rand_addr="5016a54cebb87d5abfd25e5c6b5f2b7a"]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x348}}, {{&(0x7f0000001540)={0xa, 0x4e24, 0x3, @loopback, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001580)="e2cac4683ec6bdce8649660f48861a1a71f25ac2c137dcbeac6ae6d8899aebe13f54defcae90cf6270b78ebbce4813b942f15f346061684069de74a5877e470527e3ca1c00cfa6be2e44fb3381c49800a7cac5b0ced61f71cd52061e3a955dbaf59f12b28fc4da154a5f03d685184e56607e", 0x72}], 0x1, &(0x7f00000016c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr="6c5985ad2b73f50abeb390a85d2f506e", r4}}}], 0x28}}, {{&(0x7f0000001700)={0xa, 0x4e23, 0x1, @rand_addr="4cb898d8d99c3429b036173af7627325", 0xefc}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001740)="2bca099853eccd2b565169d5fbb6e29be42419d1cbd492123bb6c65548bb2a2d463af9e606c7e091259e74f84bd32344789c49701506fb8d4b288aeffbb18dc6e6186c191fad6de99777758372fd14e68a7428b69854ec95d2a3fbce6ab8d2e525ee17e10298ea6afebe6d73d095", 0x6e}, {&(0x7f00000017c0)="3efe9e7d92fce671da6e050a62c7a2962701d4fdc784aa5b364968dfed0667fe25538784e24c752885e6039c0c2bcaafc813b0337d636bde3c2df5995c02e56f10d88df022b8cf563a88a2d3e9efe3f0c3d019cc6befc5efd4659503afa42cfe90418caee4e8d546f99c5e7f18f2adf995ee8f8a249f21bd193971af4e92815426ebc83d7fc5b610371849dbfa", 0x8d}, {&(0x7f0000001880)="bfb6230b5c03d4d78e4b0c44fd4152e8bfe49edeb3e6cf4f5e6db27aaa27b13992defdd34ae7e755ebdcf0ddc9c514e0a1ba1fc8ddea2fee2e7068ddd8b73ca96df5536935b1a3bacf84e5607544512c6337309f56c91914cdca5a481e5b3a796668ce2a7b373ed1df8d141f815d1ed1de6b72a0d4f646d65de9e8e200a6f03f1f3021044905cd6966c3ecab61b90066599105565b1ed6c8ce19142c482bcd25ccac9ced", 0xa4}, {&(0x7f0000001940)="8f42f7d85e5ece62a76e747d970c06fd57c07b81d4960a93b5d1818f1cabf101e3107c7a010849514c312cae8d72f26e0cf5fb495f20b074d2bcbe8687e166ad6e47a166242fe6c8cc6b624196a95e347e770fd98461de575b69714bcc1405de0566979774c1818fd33eb9e69065e2b1ff4a8356caf88eeaaf17105394a78c595a7c98b5515d20f7623b6c17c66b7fed04d261af2837fc269f0fe706d760b6c4cb2258209ff413ae9e1d93d2777de88e73c4a3761a9be3701c36fc8a1c6d811f6a7ea2c5112aba3f5f923733a2bc8d72f498", 0xd2}, {&(0x7f0000001a40)}], 0x5, &(0x7f0000001c40)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x3a, 0x5, [], [@hao={0xc9, 0x10, @rand_addr="35bb05451f8d8990452700d750f5f355"}, @enc_lim={0x4, 0x1, 0x3b03}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x80, 0x2, 0x40, 0x4e03376, [0x3]}}]}}}, @hopopts={{0x148, 0x29, 0x36, {0x67, 0x25, [], [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x2, 0x6, 0x20, 0x1ff, [0x971, 0x400, 0x3]}}, @hao={0xc9, 0x10, @empty}, @pad1, @calipso={0x7, 0x18, {0xfffffffffffffffc, 0x4, 0x8, 0x47bf, [0x7, 0x8]}}, @calipso={0x7, 0x30, {0x401, 0xa, 0xfffffffffffffff9, 0x7, [0x9, 0x5, 0x6, 0xe05, 0x7f]}}, @calipso={0x7, 0x10, {0x97b, 0x2, 0x5, 0x0, [0x86c]}}, @generic={0x6, 0x86, "9d17c7fbe46b331b437bb86e54419e2f7b51bf1cbfd1e7745bedcc2f01d4da3d023dd17dd8311d7038dbf3d23e900b7e89a3e25ed189129e955e8f4513ea8c5023b0544a55b3330e7342ef8c83dcf97ad9a391207ad9b634e28b5403500313067cdd598318999aaa6d7ba71caa1badc02718fadb049f30e3ef4f15d2bc31f04b0cc84d63a5ad"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x77, 0x0, [], [@ra={0x5, 0x2, 0x8b}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xbd, 0xc, 0x3, 0x2, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @local, @mcast1, @empty, @local]}}}], 0x250}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001ec0)="b4f1a27f51e5f844ee37c681ae3fa7b6e3f74939772b9f9e2beb1bf35eff48b50cd885f09261a0999a0bb41516c873dc1214babfd6a4388b7c1d2e937be0f59cd24ef6273bd103112c500aa0159bdf02469de43f546981ca5b974e168e827b90303d2f3e555777fd76a8b4c081b14a9bbbfd9f2c1ac1ed06e87c77a27653282221e10c1f56547662681756c3f1f4511852a78affda2081889b48d826ddaac464adda3a54debd6a4d9a0d9310d96e7a9293a7e0962e6b71b128ad98b9db691b93dc95974946fc741f79", 0xc9}, {&(0x7f0000001fc0)="5edcfa1036e3e4aeba0621cb4935256f497cca511976faff8ab30bfe8f1d", 0x1e}, {&(0x7f0000002000)="c0dae0350261537b72351acbb332303943580dd8ebaf8ee7e62d9fc16218821ce4d41da92e3fa8aac7f71693938d235ce5a62f647d1d8c7bdf00f62d5e416630d14f434b9db8a187505bb5d60bb621be4b4fb92a7a48b22144291ce795aa37fffb439a0e25f14eae8d512ee3b2b5ea271b0b048ec08e88fe8ce6ff9dae8f292e5dc686abbd8efa3591bd033a", 0x8c}], 0x3, &(0x7f0000002100)}}, {{&(0x7f0000002140)={0xa, 0x4e21, 0xfffffffffffffff7, @empty, 0x2}, 0x1c, &(0x7f0000003680)=[{&(0x7f0000002180)="be85cfc82285d627ab65503fe582a85fda1823be59182109434ee39f587f18ca5f5c470d30f9de1c237803d921d9bbca237e8f220673034cedeadc5d8368197342c1d618b09956c9d492be8564", 0x4d}, {&(0x7f0000002200)="c2c182ff25cd4dbe09f3ea46f9352016ac4ada23f96b21101370af29f607bf9343c77efd672f59df468600601b91ec8402300f149b89015743047a9e2ee4389305305be0fdb050f7ad8048dadce0c2dfbe5172a7dcfe896f10cc1301e54fa315552a165222d4f8e363fd8c69b649640cc62ea2afe3532bb24172c5f88cb0a54333a7d13f65aa34642acfd1eefbd8f906b49d2b11eab9a2ed297612d35f31ae205cd52b570eee92fcc1445c7f17a6c85e1c8a2bda22fc77dcc3cb2f69f1d1b8711fc296fc192d25ebc38b6796dcc9c2fdc85ce27f56a72fb08cbedf13dd87bd6e21d659bdb6e5b95f", 0xe8}, {&(0x7f0000002300)="bfd6c006d58c1185779e7e15799f150dfe3f8f", 0x13}, {&(0x7f0000002340)="b9243e2f075c47bd26ab112def390d0843491d47fdf32b69cd5798213489fed4169875318c7bfb7e8e0243d1d79eeefeb578a7ab00e83549611addf5b2da3380764f88f08ba85f333d14b0821392f39926fca516221f997378d26150d7df4d92c95001c54de11630ebad480447a21f888b44e20654043127bb0b645465d74cf3f4ce6412fcd5479715906f26cc594f0a2bbd64d3f2ce904ad0fe366c196475e5b49459702c1fd3be79b95d7117d23571b88b0262c510514810fe87fa5f58e9a245a71270cd3376d8", 0xc8}, {&(0x7f0000002440)="8ee31f66fe70f07aafcf174d07ce8ff6566b51c08aaf5b802de5d15d0d53458ad16c82f300deda933b9bde8bdf3b70ffc85f385875eb17535b0061ec0b", 0x3d}, {&(0x7f0000002480)="8f75dd47f4978147c3052e08ac0d659193d64f13252b02a2366906377a4c6db0173affe95a1b24c96f0fa99e748267241d8da2c26c8dd77f1aae4cd61f26bf9d450f261cf5578e002147547df2f2c379eab5fb54b41b25217264e1288d5ebecc9771ed8c986ded4a6de75df486df15a350c3dae6e60789ac115f344ab8281b26f641e9d97c02086aee1353194c11b4bf535f5f5e7f650bba1423e97b1192abdb162ef823c7585b7057f99c30a0d27a9fac152d285f880badd65aa9734fd479b4d05e6c1e1845f58b669b8074e99efff3ee3326530dd0b05624e333411cd8bd8bce5072055eb6c146", 0xe8}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="e7148cd9c967a0e5993505b89aac7fa034e11b5d55ef1870a564e758747b931a0c60214e25db1816cb9e013e7be3a754e263117b9a6df6938ad1a0dfea2ba6090c49b69f64e27fc3daa3568bd1356b809f7ab5f4943f1bb48f6f8b3f75f62b8cc80dd2db959a1ae68007bac5adcd1264d5588e6b2a9bf1bb3a2c61fee3bfd8d94a5ab7aad6a385a518980c777184001ff788e38e18f66747f0ed33b94a3c8db0ae1e41119ddb5a788a3de49216e99dcb24567aabaf151952bf70cf95c354c03981", 0xc1}], 0x8}}, {{&(0x7f0000003700)={0xa, 0x4e24, 0x100000000, @dev={0xfe, 0x80, [], 0x1a}, 0x4}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000003740)="94273e0d44ca6b3c6310f1f89d2d2201aa585df4f52c52d079f2027d0cd1c8fec92e96f8c6965a702b3768245d4a5c1aee2c", 0x32}, {&(0x7f0000003780)="b489c5b19b3845863453d657ae584ae41cb34d03e464bff590943d527bf8bc0ac3db2d001c17ed3c59dfb63e4ac4bd9a5982ac9c9f143d17922234919fe3af735e10c901fe0758b8f110ea6edb9d4403ac1d3ebf4a6588ab3b733ccd823fe166054e9fb2c0af388692dc4d3e3e1c7f59b25c0dc02ca57a4d754366d76bd5fed9908b48e942", 0x85}, {&(0x7f0000003840)="ea4c7d5bcfa3dda56e0afe97b2d580425430cb5ddc45386dd6063059a76a112a7ed2360f93bfbe4136193056840dc285c4d7e15cd561d6459f86ada7b0950a98b65bc4fe74b7752549debc7a832cbcd780b33b008ecb249f8c9976266020cb71c279e3a4cd38f65f6f337927be2e09245dc1d68191c78567034bba53e1d646bceb", 0x81}], 0x3, &(0x7f0000003940)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x3a, 0x6, [], [@hao={0xc9, 0x10, @ipv4={[], [], @rand_addr=0x8eb}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x74e}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x3f, 0x6, [], [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x4e}, @ra={0x5, 0x2, 0x3000000000000000}, @ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x5c, 0x6, [], [@calipso={0x7, 0x10, {0xffffffff, 0x2, 0x1, 0x80000000, [0x800]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x200}]}}}], 0x100}}], 0x8, 0x804)
bind$nfc_llcp(r3, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x7, 0x7, 0x3, "0652e06e77a96b94df8eb87e37de8cabf8b0da19ddd3247277d0a5349e8ec49d88770f2ae6b62085baf3d65074dcfe2be12f5a1ffd95cfea384df291c69def", 0x3c}, 0x60)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x3, 0xdbb9, 0x8, 0x2}, 0x8)

06:50:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x500}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:50:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1926.828933][T23693] binder: 23691:23693 ioctl 5422 0 returned -22
[ 1926.851640][T23693] binder_alloc: 23691: binder_alloc_buf, no vma
[ 1926.863549][T23694] 9pnet: Insufficient options for proto=fd
[ 1926.904256][T23698] binder: 23691:23698 ioctl 5422 0 returned -22
[ 1926.918285][T23699] 9pnet: Insufficient options for proto=fd
[ 1926.924647][T23693] binder_alloc: 23691: binder_alloc_buf, no vma
06:51:00 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
fadvise64(r1, 0x0, 0x1, 0x7)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)

06:51:00 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfsno', 0x3d, r1}})

[ 1927.056559][T23703] binder_alloc: 23702: binder_alloc_buf, no vma
[ 1927.134260][T23706] 9pnet: Insufficient options for proto=fd
[ 1927.149636][T23707] 9pnet: Insufficient options for proto=fd
06:51:02 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3)
tkill(r0, 0x1000000000016)

06:51:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x600}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_create1(0x80000)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
pwrite64(r0, &(0x7f0000000040)="491edf030eea12ef43a5858af094182f0f7bfe0b840384055fae0ac323ee313deac5b2e111dfe37574515b33a3ce0801c5551f08e0bc7e7281393a3603a9aba772dda5a20381dff021cee571929a379e0f3d", 0x52, 0x0)
mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport='privport'}, {@afid={'afid', 0x3d, 0x12}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000080000000000000000000852a0000000000ecffffff852a6273000000000000000000000200"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:02 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfuno', 0x3d, r1}})

06:51:02 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)

[ 1929.726763][T23714] 9pnet: Insufficient options for proto=fd
[ 1929.741201][T23718] binder_alloc: 23710: binder_alloc_buf, no vma
06:51:02 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1929.767373][T23722] 9pnet: Insufficient options for proto=fd
[ 1929.789013][T23718] binder_alloc: 23710: binder_alloc_buf, no vma
06:51:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x700}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:02 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfwno', 0x3d, r1}})

06:51:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:03 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8000, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1929.934493][T23732] binder_alloc: 23728: binder_alloc_buf, no vma
06:51:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffff9)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000000000000067118c47461a71c5000000852a62730000000000000000000000000000000080000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xd01}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1930.020763][T23734] 9pnet: Insufficient options for proto=fd
[ 1930.059156][T23740] 9pnet: Insufficient options for proto=fd
06:51:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfd%o', 0x3d, r1}})

06:51:03 executing program 1:
r0 = fanotify_init(0x0, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x26)

06:51:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000080)='veth0_to_bridge\x00', 0x3ff, 0xc1, 0x4})

[ 1930.248108][T23752] 9pnet: Insufficient options for proto=fd
[ 1930.271389][T23755] 9pnet: Insufficient options for proto=fd
[ 1930.306536][T23756] binder_alloc: 23754: binder_alloc_buf, no vma
06:51:03 executing program 0:
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x2000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdn%', 0x3d, r1}})

06:51:03 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4)
getsockname$tipc(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080))
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x2000040)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7d, 0x202)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1930.557508][T23764] 9pnet: Insufficient options for proto=fd
[ 1930.590610][T23768] binder_alloc: 23759: binder_alloc_buf, no vma
[ 1930.607533][T23771] 9pnet: Insufficient options for proto=fd
06:51:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x3f00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:03 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
ioprio_get$pid(0x0, r0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5813, 0x20000)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2c0010}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x814, 0x36, 0x200, 0x70bd2a, 0x25dfdbfe, {0x12}, [@nested={0x284, 0x3, [@generic="a6f050c2a26501fbe8928b55bb9d281a351e62be73c18e09b912fec1e4e6ae219965c5b73737f79125860b48530b9cbd09016395996a392192f37b730c8d6b3162165b3937c0711f2c19c07dfea7395f3340a797ccaf8ef1d482e919d67b1bbf19fe627b18cb12c947cb5fbd79d933c1a8ceeeb5ee32bcb4632f10225a076bb0fe103bba7e6e05141fa130f5c69082233d4bbc7619f180cbd55106b7feaa07d30603ff94d3486f65b5c79849a18e14e51058e2ee558573653b3cf6", @generic="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", @generic="82b76a505d87d3b4682cc70648e330381f615130004a5a8a1dd595c4c8027dd5b11961a0e8336900c52a286fe409f015d5b9768d62371aac9e87f42e1a9dbab18b7c685f6efb613ba9f4fb18fe82ac2d746e62564ea33082da123b18ecf79ad2785529fec45f57a4d378f77e64e90b9d8a336fab9494cc813e6ee730f5130fefb76e670c779b49cbf1d45f9b7501d584089128d61d90adf7c7fcf1944641146b6da780849c49702b8150704aaf2e42bb15c5dbda368b26a68117516580e2133844af4650212e37c64b"]}, @typed={0x8, 0x12, @pid=r0}, @typed={0xa4, 0x74, @binary="bb76e0ab1e5d4d18aedb8bf4e5283eee2647a8a7db80992f59c92987affcc4d57a00f3dcebdba1c70a1eb09e30d8a2b679121e4b3cc1e624e12b3559068b408b1250403c05d9f922e9b466f9f74465343d9feca5a982f245f5fec0ebc0efbfdc8c7d9061ccedf40decaaf6b2e75c409f6179b750eab6c01d5a3755f5fa7a2903808a2f6d62fba620bcfd30be647498e6ce1c29b663ea85f67b16a7a77050d664"}, @nested={0x308, 0x35, [@typed={0x8, 0x52, @ipv4=@rand_addr=0x6}, @typed={0x8, 0x88, @str='\x00'}, @generic="e3df373e41d18f989b2726840346e5eb6eab043ac22d9b9690fddab2519ead22cfa69313a9242af76bf5f6cf692c19a6474406ede566bd70f07cb0f2dac5e13d59f04f015905405f0f968b4bb42368c86ed1ae3552c78a6c82e8e3074fafdb6764c9469d3e1a7de4b0217b91e38082f07be1348cbbd6a3248fd832bc6f049b2b89c9780d0efdfa793b155454623566c9ac68a8941d1c9090ac0b799c3ce4a08f4aeae7ed9493e5347ba9a7d106ed5337812ecbf22a1d567b6913aaefbe008a0452e38723a21b852e19db7b3481d58af87fd13be585ffae94168dfa86b64f92b72814ae66601f97bc45094df2ee", @typed={0xfc, 0x5, @binary="b434e8a064403fe0cf43c78c1fa3d8c2cfe9453d48e6df1b5ec8f61b4f2b396b6110f1502448639d8abee7a2829fab393821c36c8646e66a2e603e8dc409bc341aafda5c02460476e4971ca3a162e73c427881a5860f6a72d80455e1e4489b1aaccdb71610e7fd949449be42f9e4810a468148c4bd3ddbd581e97c1bac1e202db6285f67ccb311b7493b0379edd876d7e9b78a95cbc3c98cb37610f29beab843cc27dbd1ca340d54c316c517831f1201b8cf9b32c045e3bf20297a44b0161b42e2f85123a7c4e2d82fd84938e9a3c84e2f1d208dbc0d0a3c4ceb77c4b359fc21106ea4eecc74beda63f1a2bbf04b7ef7f3fa4aca9a"}, @typed={0x8, 0x7a, @fd=r2}, @generic="ca8250c9e4345eb3dca6050b51f4d44a1a1c912997906121c37498d33cf9edc6c77753411704e9b21980e99de0faf6bf6d4effc68810b563b82a461b890e86503262da99aa6be27814ff0b66a052b4ad9f81da9e48759ec0f9b7045c131c6a18e171eb5856b73b9423b5d833b6d3f33b1a56cde9033f4ef9042680189a435cfa165beafda5287c90c4d0481899ab1f2ed1f8cdb7ff8d", @generic="5496e7c766687d6f90a407e5a4c5124ba12b175363b22685ee9dd6c295c5fa694baa7e84a1b2a2816f214b24ea6f1782cb9400f20374e3062846d354110dd6f3c047eddd0750dcfdc1a936c6166385d3b154765c26c3f95002db8786cb99", @generic="db0fa3ff73e7067e13eb44ff"]}, @typed={0xc, 0x5b, @u64=0x7}, @generic="120051defafc8174659ec3091aa7967c7a1885c4defac6ed187421489d024bc1e840ce37192e7db36df57d76bde1b7ef9cbe1bc3d8c10361935c793f2f591aea719d92cb38f4bf9b88f3", @typed={0x80, 0x8f, @binary="d346595ab2ffc18d49214cd28bc05c213a43a82318847df457a8eae1d198b05fb8395eb0e241fcc6195ee4b64099810463c774072275d56eb24f1b31e4524690d860490cef8cda037d0b3b86aa5be6bbd7e50a7ac20d8382311f81d7bedfea55f1ffcc656fdf5c45a334a1051b35a3f94a29526b409718df8f0f"}, @nested={0x4c, 0x4d, [@typed={0xc, 0x6b, @u64=0x81}, @typed={0x8, 0x20, @u32=0x401}, @generic="2cea3e3414be434272b983ee78ad54cbb7808f0561944be9f4a7482c9f95f25bd11457f481f43ecbdec0ff0a3592064196067765"]}, @generic="301ab6102177fd3790f0d2b6f6615da66c420fb94980832a26fb90f93e4f49257a39d14345b36fd30d357f08f83b4431c432fca4b6cc331f222a5202a44e0affeb0ba9fa01343a67916783447c675e4e9afbdecce9c7c0afe2451c967184405cca3fa4e7a4b67c21a7a35074b728eddc2a9b56a2a3f5ca62ed617733593447d0aa5f331972aad9469419da6d85716e7adbe56003ef345bc77bcbca5aebcbb131c9ec7e"]}, 0x814}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

06:51:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdn\\', 0x3d, r1}})

06:51:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x8000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x154, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c42}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x596}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1930.841618][T23784] 9pnet: Insufficient options for proto=fd
06:51:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x4000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1930.885838][T23794] 9pnet: Insufficient options for proto=fd
06:51:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:04 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a6273583267a940c28aeb000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:04 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:04 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2, r1}})

06:51:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xff00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1931.510150][T23805] 9pnet: Insufficient options for proto=fd
[ 1931.519694][T23809] binder_alloc: 23801: binder_alloc_buf, no vma
06:51:04 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x101001)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r2 = gettid()
bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, {0x7, 0x0, 0x9, 0xe817, 0x6, 0x7f}, 0x3}, 0xa)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000240)={'lapb0\x00', 0x5d})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:04 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3, r1}})

[ 1931.567528][T23812] 9pnet: Insufficient options for proto=fd
[ 1931.573742][T23813] binder_alloc: 23801: binder_alloc_buf, no vma
06:51:04 executing program 4:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x400000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x3f0, 0x1d0, 0x3f0, 0x3f0, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x900000000000000, 0x87cb, 0x7, 0x4, 0x3}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x7b, 0x7fff, 0x3, 0x7, 0xfffffffffffffffc, @loopback, @ipv4={[], [], @local}, @empty, [], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xff000000], 0x2, 0x190}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1f, @ipv4=@local, @ipv6=@loopback, @icmp_id=0x66, @port=0x4e21}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0x0, 0xff, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 'nr0\x00', '\x00', {}, {0xff}, 0x0, 0x800, 0x2, 0x10}, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x18, @ipv4=@broadcast, @ipv6=@empty, @port=0x4e24, @gre_key=0x7}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@dev={0xfe, 0x80, [], 0x1a}, @ipv4=@remote, @gre_key=0xff, @port=0x4e24}}}, {{@ipv6={@loopback, @rand_addr="0558d918b7ffeaab4738a0de86735e4b", [0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ifb0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x32, 0x9, 0x5, 0x2}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@remote, @gre_key=0xfff, @gre_key=0x67d}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
vmsplice(r2, &(0x7f0000001d80)=[{&(0x7f0000000ac0)="470c65f1d52b465b26ebfce296da37b60085e9136ed91a3005d7c0d0078e573b91f2e89c90a5ed448a2611868a3a2cbd525c296b8569af97b90be979ca6e655939bcb5cf9eb0aee2c2f1e268a263f46d433c3d7f3b4b3a6915d9547c427231f355eefa982f88cb9d45bc1bcc280e7b9a55752caa0c471c020f9b727d3ed17b9d483d4ea84eaa1796f6733dc5e4780418fc9101b33ea336f4c8475b66cb7dc7dc4e95d6b1f883cbd6c9165f8a196b674063b3241ad67b71123036b05f39c1f1f6675838d713b049c35de2d8146f38b511ced23f9a8aea90a7bb747edcadd45828b2b5bb285509", 0xe6}, {&(0x7f0000000100)="62f25109007ed77f02", 0x9}, {&(0x7f0000000bc0)="9d324ec1d7ade3282c048943c7c1fca7bf59ccc90fa1c3178212785fa1d1a838f6c1ded244c1d1d2f111eaf20e18980c283c60b0ebc8fbe1566a6d0fb8b1009378c0f24eeff17195db5cb718d43f991acd83998148547d8e952b42a48a2b648d9f767e7dbe645f5173dcb1298a55f0eda761487b2f5276b1516ac38f3ffe86095be3216b9cf96f0e95f79baade13affabebfc1fcdc9d7d24ec5b239be0b09543474cf335d6f971ddfd8e9ab6d840b135f3faf1f064a06ca01a7b1c843634c176d1665f80957749b0df7583ce9d1242d6ff85624a293b08385279f1e112a07178f236bd21a85adcf16928dd4bfe2f187a8f343e783c87a514cbf5cc", 0xfb}, {&(0x7f0000000380)="00fcbb1377b03eda38db873bdb9a476e6f4ca23969e65de702a60156fc5defcaebf245bede7b3eb63405e22634c89601be383e0a06adf55c906de4ef42bd9ad9843ff70898af7065d810ebd2db12b5374dec0f139b15dea1aa7cd8130c2c9b4ecd718189be5113aa09a79f7b734e0a7c0090d4fa9d697aa0fb3a8929dd37139dc3c907d8671f3c005a04088cfcb678db8f2bf79f6e487d2384a93b5349f7d3499819a95679cc", 0xa6}, {&(0x7f0000000280)="eb894694e051b04f45f22a0ee4183f9bd4d16ad1d6f4577bfc6f5c0fca45e0e2dfd10ed00a7fcf6449416eac1b9c62a0582c7acbf8fb481e89f30294febda77adab4efc12e2fbbee1b8f882c305f6e3f54f682246e4cb16dbbb184fd85d4a25322dca844619d5d9e", 0x68}, {&(0x7f0000000cc0)="dc8e10c9f3a342c89f8ebf6144eabeb4699f96bc21c497f8bd5495c6dd9b3c091bc05353256dbaf3f50607318ca8c9e6c57b2bd10964c50da1f779c32f8d281b11faa2c16ed98fc351ddeb8632eb1e5dd472c3c1c9d7816256d4ed98f58ccb4e52cdf3d6c18cb918db1420b3b4f752b2cde12b4c73ec4c741ceb4faba9ec06688852e837e1b06e759cb467796f08ece9ee5d", 0x92}, {&(0x7f0000000d80)="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", 0x1000}], 0x7, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x40000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1931.713907][T23820] 9pnet: Insufficient options for proto=fd
[ 1931.752094][T23825] 9pnet: Insufficient options for proto=fd
06:51:04 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="27ae6e2ab8dd4e483b3319267a1173bde22d7c2339ee129e3780e321d328023463822da9950f8505fa57c729ac40fc162ae9fd4f7d61afeec0", 0x39, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f00000004c0))
r2 = request_key(&(0x7f0000000640)='.dead\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="f0e28307fd6af612a7171ffb4e359a2fdf1db1a8a3fc71e7afc2d96f881c463a5c718852fe126b01fffe549a0b232638bcf2695e9c00c00fe9f26a04239f0c690751e4c95d2d2773d38d62", 0x4b, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r2, r3}, &(0x7f0000000340)=""/65, 0x41, &(0x7f0000000480)={&(0x7f00000003c0)={'md5-generic\x00'}, &(0x7f0000000400)="d9f7f612e4ea9c7154d3942987bab5990f2c4b15f3f0674b8aa4f2521f11294d37d1ba3a352cfe313d08c3cd702d486dd67ad89c3a8faabd62f14d9dae04f07fd19778b11fa7b6a338f924d582eb6e3792db2731bff3ed155b9eaba6baa8af043f9c91bf92bc212d0663b0", 0x6b})
r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
lsetxattr$security_evm(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="07031300000063f4bf98a6f522f5b13d1e0a51e4aa0afd54b97ee645e89134adeb079e81b9ef9f2be05e005a177ed7f089ec7d51a67db117b5676894b5a2502784ade3adaaaed27f3f5cc0477403342eb9bffb371d99daa6426ccb8302df0ce9a45448432be598249cf4c858514b09230475716900560a3000000000000000029005608fa22550f3eaa0ff9639881000000000"], 0x74, 0x2)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d3a11ff3dfb8d053f2d20b3a80894a6c49abb2fdc612fab4b03e19cb7c", @ANYRES16=r5, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x8000000000008804}, 0x5)
tkill(r0, 0x1b)
read(r4, &(0x7f00000006c0)=""/207, 0xcf)

[ 1931.760407][T23823] binder_alloc: 23822: binder_alloc_buf, no vma
[ 1931.798361][T23823] binder_alloc: 23822: binder_alloc_buf, no vma
06:51:05 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:05 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x4, r1}})

06:51:05 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x7f, 0x2e, 0x30]}}, &(0x7f0000000280)=""/195, 0x1d, 0xc3}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008f4352e8563aaac70328bf862063404000000081000000001000000000000000000000001e000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:05 executing program 1:
r0 = gettid()
r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x6, 0xc3)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000340)={@empty, @local}, &(0x7f0000000380)=0x8)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000001c0))
getsockopt(r2, 0x9, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x200000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1932.464250][T23844] binder: 23836:23844 unknown command 1380159232
[ 1932.470668][T23844] binder: 23836:23844 ioctl c0306201 20000440 returned -22
[ 1932.496560][T23840] 9pnet: Insufficient options for proto=fd
06:51:05 executing program 1:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r0=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

06:51:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7c761c72, 0x5, 0x0, 0x4, 0x80000001, 0x3, 0x3, 0x10001, 0x1be, 0x38, 0x10f, 0x3ff, 0x74c, 0x20, 0x2, 0x0, 0x0, 0x9}, [{0x60000000, 0x6, 0x100000000, 0x400, 0x0, 0x3ff, 0x3, 0xc5dc}, {0x0, 0x9, 0x200, 0x7, 0x5, 0x6, 0x40, 0x8000}], "c31962334f35feda8a64830b57a11d6904b9044a2340963680140beaecda74c69ff63c9c529c9df107b1f8fa5c88131104c6eb39fa4c7faca484a96f78a8c622ad1ee35f08bce4241c100db0092903cf3915ba85a3400e0cf1c52f5b25f27b4f842fb639d54dea47d1a991fc8aeaeaad7da0c434e02f", [[], [], []]}, 0x3ee)
r3 = dup2(r1, r0)
getpeername$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4b, 0x0, &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES64, @ANYRES32=r1], 0x3d9, 0x0, &(0x7f0000000100)})
dup(r1)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80240, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xe5, 0x4)

[ 1932.548898][T23849] 9pnet: Insufficient options for proto=fd
[ 1932.570772][T23844] binder: 23836:23844 unknown command 1380159232
[ 1932.585697][T23844] binder: 23836:23844 ioctl c0306201 20000440 returned -22
06:51:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x80ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:05 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x5, r1}})

06:51:05 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, r1)
tkill(r0, 0x24)

[ 1932.749804][T23858] binder: 23857:23858 unknown command -1
[ 1932.768266][T23864] 9pnet: Insufficient options for proto=fd
[ 1932.771927][T23858] binder: 23857:23858 ioctl c0306201 20000440 returned -22
[ 1932.821378][T23858] binder: 23857:23858 unknown command -1
[ 1932.823420][T23868] 9pnet: Insufficient options for proto=fd
[ 1932.835804][T23858] binder: 23857:23858 ioctl c0306201 20000440 returned -22
06:51:06 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x94144402}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2a4, r2, 0xace0509960c81184, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800000000000000}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x29}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec3}]}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @rand_addr="6da7b6c81a7d2fd445ed941bd89f19e2", 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x45}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x300, @dev={0xfe, 0x80, [], 0x18}, 0xea41}}}}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x445fbef2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9ea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb35}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6a63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
tkill(r0, 0x1000000000016)

06:51:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4080, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x6, {0x7, 0x1e, 0x3, 0x800004, 0xffffffff, 0x10000, 0x675d, 0xfffffffffffffffb}}, 0x50)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xf0ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x6, r1}})

[ 1933.405206][T23877] 9pnet: Insufficient options for proto=fd
[ 1933.419529][T23881] binder_alloc: 23872: binder_alloc_buf, no vma
06:51:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040), 0x4)

[ 1933.449656][T23884] 9pnet: Insufficient options for proto=fd
06:51:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x100000000, 0x40040)
ioctl$TIOCEXCL(r0, 0x540c)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2)
mq_getsetattr(r1, &(0x7f0000000080)={0x3, 0x4, 0x9, 0x8, 0x4, 0xfffffffffffffff7, 0x81, 0x3ff}, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x3e, 0x1938, 0x2d})
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x1000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:06 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x7, r1}})

06:51:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
tkill(r0, 0x1000000000016)

[ 1933.676573][T23896] 9pnet: Insufficient options for proto=fd
[ 1933.703673][T23901] 9pnet: Insufficient options for proto=fd
06:51:07 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x8, r1}})

06:51:07 executing program 4:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40000, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000002c0)={0x7fff, 0xfffffffffffffff8, 0x0, 0x7, 0xf, 0x8, 0xf1, 0x1, 0x9, 0x8, 0x9})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e20, 0x20, @local, 0x7ff}, r4}}, 0x38)

06:51:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x10d0000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:07 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x88, 0x401, 0x7, 0x7}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x5, 0xffffffffffffffff}, &(0x7f00009b1ffc))
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2)
getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$RTC_AIE_ON(r2, 0x7001)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1934.395982][T23914] 9pnet: Insufficient options for proto=fd
[ 1934.409773][T23919] 9pnet: Insufficient options for proto=fd
06:51:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000001c0))
syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x4}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000008000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x9, r1}})

06:51:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x2000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x10000)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x162)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={<r2=>0x0, 0xfff, 0xbc, 0x10001}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0xffffffffffffff01}, &(0x7f00000001c0)=0x8)
sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="4e7fd5de55680cae9914831b571d36179c93b7acf469208efdbad1f23cc20c035fa6a292f3aaf390c7d06e4f060bbcc7b5fb18c517a0ad36b060b1c72a83b2c13f1783fcf347a4b053059e6a82783a2d77bda1a8e972210cb6f70c5d4a567cfb29dbb5d7b00819eb6f5f8b2b4946d10e5148a7c81f9e7227dd1503ac3b", 0x7d}, {&(0x7f0000000480)="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", 0x1000}], 0x2}, 0x4000)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003d80)='/dev/btrfs-control\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000003dc0)={0x2, 0x10000, 0x8000, 0x2, 0x4, 0x0, 0x978e, 0x7fff, <r4=>0x0}, &(0x7f0000003e00)=0x20)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000003e40)={r4, 0x80000000}, &(0x7f0000003e80)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1e, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x2d9, 0x0, &(0x7f00000003c0)})

[ 1934.647951][T23932] 9pnet: Insufficient options for proto=fd
[ 1934.675018][T23937] 9pnet: Insufficient options for proto=fd
06:51:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xa, r1}})

[ 1934.812197][T23942] 9pnet: Insufficient options for proto=fd
[ 1934.841984][T23945] 9pnet: Insufficient options for proto=fd
06:51:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x3000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:08 executing program 4:
r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x800)
fsetxattr$security_ima(r0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000400)=@ng={0x4, 0x12, "b7acba"}, 0x5, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000100)})
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000440)={0x0, 0x3})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x3, r3, 0x1c, 0x1, @ib={0x1b, 0x2756, 0x1000, {"1d602f69a15cf7ae2b8df5056bcf6201"}, 0x7, 0x2}}}, 0xa0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4900, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802)

[ 1935.289969][T23949] binder: 23948:23949 unknown command 352674573
[ 1935.316155][T23949] binder: 23948:23949 ioctl c0306201 200000c0 returned -22
[ 1935.375510][T23953] binder: 23948:23953 unknown command 352674573
[ 1935.381832][T23953] binder: 23948:23953 ioctl c0306201 200000c0 returned -22
06:51:10 executing program 1:
r0 = gettid()
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xea902, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x57, 0x7405486c, 0x16a, {0x8001, 0xfffffffffffff001}, {0x9, 0x200}, @cond=[{0xa11, 0xee50, 0x8, 0x0, 0x100000000, 0x6}, {0x5, 0x82, 0x8, 0x1, 0x73869ac5, 0xec}]})
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:10 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xb, r1}})

06:51:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:10 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x800)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0xce, [], 0x0, &(0x7f0000000100), &(0x7f0000000280)=""/206}, &(0x7f00000001c0)=0x78)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006360400000000000000000000000000000000800000000000000000000080000000000000000000000000000000000000000002b64b72f78e255404b96198f3e6f2d40c040324411a444d30b22b9", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x4000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1937.418277][T23963] binder: 23961:23963 unknown command 1080058624
[ 1937.424017][T23965] 9pnet: Insufficient options for proto=fd
[ 1937.438388][T23963] binder: 23961:23963 ioctl c0306201 20000440 returned -22
06:51:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1937.480239][T23968] 9pnet: Insufficient options for proto=fd
06:51:10 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xbc1a, 0x10000)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000400)={'raw\x00'}, &(0x7f0000000480)=0x54)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x1c, 0x4, 0x7f, 0x0, 0xfffffffffffffff9, 0x4, 0x80000001, {<r1=>0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x7fff, 0x1, 0x81, 0x5, 0x1}}, &(0x7f00000001c0)=0xb0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0xf99, 0xd6ed4007dc55b437}, 0xc)
perf_event_open(&(0x7f0000000140)={0xffffffffffffffff, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00634040000000000000000001000000000000000000000000000000758243203986ab28000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62620000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, &(0x7f00000003c0)})
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x2)

06:51:10 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xc, r1}})

06:51:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x5000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:10 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x8, 0x7, 0x6})

06:51:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:10 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xd, r1}})

[ 1937.664273][T23981] 9pnet: Insufficient options for proto=fd
[ 1937.672492][T23985] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1937.672500][T23985] binder_alloc: 23979: binder_alloc_buf, no vma
[ 1937.681169][T23988] 9pnet: Insufficient options for proto=fd
06:51:10 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x6000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:10 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x200001)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x400}, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1937.831935][T23995] 9pnet: Insufficient options for proto=fd
[ 1937.865979][T23999] 9pnet: Insufficient options for proto=fd
06:51:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:11 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xe, r1}})

06:51:11 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x89c4, 0x202)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x6a00, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x80000000, 0xfc, 0x3, 0xfe, 0x7, 0x2c00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f0000000380)=[@exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/183, 0xb7, 0x1, 0x1a}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/28, 0x1c, 0x0, 0x3c}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r2}, @release={0x40046306, 0x1}], 0xef, 0x0, &(0x7f0000000480)="3c64d4aabd615a8e50092a6e92f076ec3f3cd695b3e0dcd9994b186944ffd8eee2b26c7ff6b0fc98bb80e7c0d5bdd2b7a44621aa50e89cf24ff9fb144df58935a0a9e4c543e3017543d5e44e5e9e4ac9e2dd556fe39fb0bd2cc41409d81427f23af5a97c4d09929b5d9ffd32b16574be7d3ba93cefaea7028d3b31fe769fea79fd7b172f8bd68f6e56cb1a34f723b9393026160a482a947dc82213b52dd06b9d97c30e4a6c7accfd9500156afbcf3fbd6061e8a376053a167503798d963ef4a689b51071ffe0db4d5f8301f7df17cc3948b18f75f2f5d897101bde02fd8beb9e0b6a9e5ed0b6d9f38c6cde25b439a2"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x7000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1938.306653][T24017] 9pnet: Insufficient options for proto=fd
[ 1938.316568][T24022] binder: BINDER_SET_CONTEXT_MGR already set
[ 1938.331943][T24023] 9pnet: Insufficient options for proto=fd
[ 1938.346654][T24022] binder: 24014:24022 ioctl 40046207 0 returned -16
06:51:11 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x4, 0x1000000000000000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:11 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xf, r1}})

06:51:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1938.380060][T24022] binder_alloc: 24014: binder_alloc_buf, no vma
06:51:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x8000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:11 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xff, 0x100)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x1000000, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:11 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x10000, 0x1, 0x9, 0x400, 0xd, 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
ftruncate(r1, 0x7fff)

[ 1938.522727][T24034] 9pnet: Insufficient options for proto=fd
[ 1938.539310][T24039] 9pnet: Insufficient options for proto=fd
[ 1938.556521][T24040] binder_alloc: 24037: binder_alloc_buf, no vma
06:51:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:12 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x10, r1}})

06:51:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x10000060}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={<r3=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x100, 0x3, 0x100, 0x7, 0xe5}, 0x14)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x2, 0x0, 0x1f, 0x8}, 0x6)

06:51:12 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv0\x00', @local})

[ 1939.212175][T24050] 9pnet: Insufficient options for proto=fd
[ 1939.229338][T24054] binder_alloc: 24052: binder_alloc_buf, no vma
[ 1939.274630][T24058] 9pnet: Insufficient options for proto=fd
06:51:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:12 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x11, r1}})

06:51:12 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
prlimit64(r0, 0x7, &(0x7f0000000040), 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x39)

06:51:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4000080000000, 0xc01)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x1, 0x50000, 0x3, 0x9, 0x80000000, 0x20})
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x3f000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:12 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x80)
fsetxattr(r0, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)='%eth0eth0em1\xf3ppp0-\x00', 0x13, 0x1)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000001c0)={0x4, 0x28c, [{0x3, 0x0, 0xa6a}, {0x3c, 0x0, 0x4}, {0x3, 0x0, 0x401}, {0x0, 0x0, 0x7}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r2=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x7, 0xfffffffffffffffe)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000080)={{r3, r4+30000000}, {0x0, 0x9}}, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xc000, 0x0)
tkill(r1, 0x1000000000016)

[ 1939.475870][T24073] 9pnet: Insufficient options for proto=fd
[ 1939.511551][T24077] 9pnet: Insufficient options for proto=fd
06:51:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x12, r1}})

06:51:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x40000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x2000)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)

[ 1940.176443][T24085] binder_alloc: 24083: binder_alloc_buf, no vma
06:51:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)

[ 1940.217083][T24090] 9pnet: Insufficient options for proto=fd
[ 1940.255094][T24094] 9pnet: Insufficient options for proto=fd
06:51:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x13, r1}})

06:51:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x60000010}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1940.361187][T24100] binder_alloc: 24098: binder_alloc_buf, no vma
06:51:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273002519552300000000000000000000000000000000000000852a62730000000000000000000000000000458a4e000000000000852a627300000000000000000000ba0000"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000004080000f00042c71f5c0c0e34541fe4e42cf0b23ad2000000002000001f000000"]], 0x0, 0x0, &(0x7f00000003c0)})

[ 1940.441326][T24105] 9pnet: Insufficient options for proto=fd
[ 1940.462246][T24109] 9pnet: Insufficient options for proto=fd
06:51:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x14, r1}})

[ 1940.549236][T24113] binder_alloc: 24112: binder_alloc_buf, no vma
[ 1940.631423][T24116] 9pnet: Insufficient options for proto=fd
[ 1940.645999][T24117] 9pnet: Insufficient options for proto=fd
06:51:15 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xfdfdffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:15 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x100000001, 0x400800)
getsockopt$nfc_llcp(r1, 0x118, 0x5, &(0x7f0000000380)=""/129, 0x81)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x100800)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
init_module(&(0x7f0000000080)='/dev/binder#\x00', 0xd, &(0x7f00000000c0)='mime_typeuser\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="7c0d000000000000172800000000b60ba1a800000000000100000024d7acdaa08fd504a79e00"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:15 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x15, r1}})

06:51:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1942.644427][T24122] 9pnet: Insufficient options for proto=fd
[ 1942.684252][T24130] 9pnet: Insufficient options for proto=fd
06:51:15 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = getegid()
lchown(&(0x7f0000000040)='./file0\x00', r1, r2)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7fffffff, 0x206000)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000380)={0x3b, "cf6e9592a3318104244f74b163f8152d7edb918417c945b46f7b5a4640a97afd2f8036c574bc950dd64d66485c545ab9dcba337ebf2691d910749f9f890a4806a0a22a26352d6ea5de409543bb56567aac84ee367f3b87f7907f2a2727343d3eab2bc970b12d1b8e32227e9126574749f02e09c7bb2ab019450aee9ab755f90d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000de77b1d900000000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:15 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x16, r1}})

06:51:15 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x3, &(0x7f0000000040)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000080))
tkill(r0, 0x1000000000016)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f00000000c0)=0x1000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x7, 0x7, 0x6, 0x3})

06:51:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xff000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1942.794951][T24137] binder_alloc: 24136: binder_alloc_buf, no vma
06:51:16 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:16 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000480)="ba00aa5cfea8616aafa86175ba0de9b949147e9e1a2a569bae3cb5a199b37b6130a4885d80e3fb2f464ffd43155b101c316d955508c12da1615a939af6050e987461f58d09b83e36be1e57ba7dffd577fb031593bec7d205b8da773a949c236006eedfaa9e16904ef15c149b7e97f65704b0f88db9a10ea38ecdda637e1a6c4966fa57ada10a1976968d9592ec188a0f9766c7ce680c2fdc79a734c12d5881b79007b199dd9affd8a073641fcec7301275f9dfc06f6ded548a7ab41294b5289f83462ce7565578525f8076455d64ac0ac16e5a881e8ac855eb40a88845418ed113d265e7d0ccc500", 0xe8, 0x6}], 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="666f7264652c6e4c626172726965722c6465636f6d706f73652c6465636f6d700800000000000000636f6e746578743d73797374656d5f752c7375626a5f726f6c653d28242d6d696d655f7479706566707070306b657972696e67776c616e30c38270726f6376626f786e6574302c736d61636b6673726f6f743d2f6465762f62696e64657223002c6f626a5f726f6c653d2f6465762f62696e64657223002c736d61636b66736861743d2f6465762f62696e64657223002c6673636f7d746578743d757365725f752c7365636c6162656c2c00"])

[ 1942.872172][T24139] 9pnet: Insufficient options for proto=fd
[ 1942.898254][T24149] 9pnet: Insufficient options for proto=fd
06:51:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x17, r1}})

06:51:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xffff8000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1943.007166][T24154] binder_alloc: 24153: binder_alloc_buf, no vma
06:51:16 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x100000000, 0x40240)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x7fffffff, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

[ 1943.092373][T24159] 9pnet: Insufficient options for proto=fd
[ 1943.135333][T24164] 9pnet: Insufficient options for proto=fd
06:51:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200))
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:16 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x200400, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f00000003c0)={0x20, 0x8, 0x57})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x840)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={<r4=>0x0, 0xb3f}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x4, @remote, 0xffffffff}}}, &(0x7f0000000340)=0x84)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d622b0e5691c4c6073fa93f8f6000cd4a3a40038f422fa921f63404000000000000000000000000000b900001802002000a056ef0ef54e0f4a32fef7fcb5100000000800"/90, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000016000000000000000000f6a3e9a0bd766a6a0000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x18, r1}})

06:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xfffff000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:16 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x21)

06:51:16 executing program 1:
r0 = gettid()
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
getresgid(&(0x7f0000000140)=<r3=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
fchown(r1, r2, r3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="3207fa8aabd43f66d92b346184b14c22b8d0b17ad1fec70be352949023d82bb8ad502acf1afa4fd2b40fadc112fb06c83f97c9a683cf99600b3ad2bb61fcdd2f09400492a5b693adaa3a6e37dba548346f37c8a7fea1db55544cf30e7658a2e0db118d263e2c41bdee5528f371b418a0c70f031fc356545b", &(0x7f00000002c0)="28831df0fc034d3f5f06a71b86e0d008c169a5f1a49b86f1df03a3091500ae9774d5512df986ba006e40500707d33e53f42b00f30b8e628dab4b349b2b3ccaca4caea31985ec0c3fbf339c58f5a503f67068492239dc5008867f2948b718a59c25b18522b5e6c11d661193a6237cd42f154160b64caaf5df6b919e61bcc7b6423a6cc956ff6803f0b694866435574a5108e7ffcfa1fde2758373e5a8cdc1103af0cda97f8f03ce59"}}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1943.511268][T24177] binder: 24170:24177 unknown command -441441578
[ 1943.520284][T24176] 9pnet: Insufficient options for proto=fd
[ 1943.537234][T24177] binder: 24170:24177 ioctl c0306201 20000440 returned -22
[ 1943.552666][T24183] 9pnet: Insufficient options for proto=fd
06:51:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x19, r1}})

06:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xfffffdfd}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl(r0, 0x7, &(0x7f0000000040)="519e8bf8532668421c269af3792faba71094180b1c022ae394588735d44933")

06:51:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1943.607900][T24185] binder: 24170:24185 unknown command -441441578
[ 1943.627015][T24185] binder: 24170:24185 ioctl c0306201 20000440 returned -22
06:51:16 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x202, 0x0)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/75)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r2, 0x2, 0x2}, 0x14)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cqu '], 0x5)
timer_settime(r1, 0x7, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0)
tkill(r0, 0x1000000000016)

[ 1943.747854][T24197] binder_alloc: 24192: binder_alloc_buf, no vma
[ 1943.750161][T24195] 9pnet: Insufficient options for proto=fd
[ 1943.783396][T24199] 9pnet: Insufficient options for proto=fd
06:51:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200))
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:17 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x1a, r1}})

06:51:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:17 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2)
write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7)
r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/144)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x4000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1944.443568][T24208] 9pnet: Insufficient options for proto=fd
[ 1944.453378][T24214] 9pnet: Insufficient options for proto=fd
[ 1944.461971][T24212] binder_alloc: 24211: binder_alloc_buf, no vma
06:51:17 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x1b, r1}})

06:51:17 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x0)
write$P9_RCREATE(r2, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x1, 0x40000003, 0x5}, 0x7}}, 0x18)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000180200200000000008000000000000050053192eeec998101e69c61b433147bc292cf2d46c1d33ef9ddb59f39fc3a84afdbd542ca548460401a4ec4868faaf1ff8fffca47b26a965bf4a81fbedf46815", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000d239ad22117607d6fc06a33646793ca3fe4d600cd8bd4059782bb6753b62d3c331348433042143724aec3"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

06:51:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x20000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1944.625466][T24223] 9pnet: Insufficient options for proto=fd
[ 1944.654900][T24229] 9pnet: Insufficient options for proto=fd
06:51:17 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x1c, r1}})

06:51:17 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xd7, 0x0, &(0x7f0000000280)="cb971067b636fb0ab3f182a82dace965228fcdf0aff796d4ffa0402d181e248b686fee9254824f44643399631a6319d94f113c4790ff9a265cac28287b6106cc6b01f7d1793a834777383a1cec610c9768b3"})

[ 1944.847799][T24237] 9pnet: Insufficient options for proto=fd
[ 1944.864102][T24240] 9pnet: Insufficient options for proto=fd
06:51:19 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/231, 0xe7, 0x1ff, 0x0, 0xfffffffffffffffc, 0x0, 0x8000}, 0x120)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x80ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:19 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000b53c4ef6000000000000000000b9547b67542556c220000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:19 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x1d, r1}})

06:51:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200))
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1946.939840][T24248] 9pnet: Insufficient options for proto=fd
[ 1946.950677][T24249] binder_alloc: 24245: binder_alloc_buf, no vma
[ 1946.977828][T24251] 9pnet: Insufficient options for proto=fd
06:51:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:20 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x1e, r1}})

06:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xf0ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:20 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@empty, @broadcast, <r2=>0x0}, &(0x7f0000000080)=0xc)
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
mq_timedreceive(r1, &(0x7f0000000100)=""/121, 0x79, 0x1, &(0x7f0000000200)={r3, r4+30000000})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', r2})
tkill(r0, 0x1000000000016)

[ 1947.191743][T24265] binder_alloc: 24263: binder_alloc_buf, no vma
06:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x100000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1947.249552][T24265] binder: BINDER_SET_CONTEXT_MGR already set
[ 1947.265338][T24270] 9pnet: Insufficient options for proto=fd
[ 1947.269320][T24272] binder_alloc: 24263: binder_alloc_buf, no vma
[ 1947.288976][T24265] binder: 24263:24265 ioctl 40046207 0 returned -16
06:51:20 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
gettid()
tkill(r0, 0x1000000000016)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/46, &(0x7f0000000080)=0x2e)
tkill(r0, 0x1f)
gettid()

[ 1947.319187][T24275] 9pnet: Insufficient options for proto=fd
06:51:20 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x1)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/135)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800002)
r3 = syz_open_dev$binder(0x0, 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x7, 0x0, &(0x7f00000000c0)="a1af491fc57712"})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000300)=0xe8)
bind$packet(r0, &(0x7f0000000340)={0x11, 0xf5, r4, 0x1, 0x5, 0x6, @remote}, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

06:51:20 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x21, r1}})

06:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x10d000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1947.546931][T24288] 9pnet: Insufficient options for proto=fd
[ 1947.596031][T24293] 9pnet: Insufficient options for proto=fd
06:51:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:20 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2200, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000001c0)={0x100, 0x3, 0x1, 0x8, 0x0, 0x1, 0x2})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00')
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000002c0))
r1 = gettid()
timer_create(0xffffffffffffffff, &(0x7f0000066000)={0x0, 0x16}, &(0x7f00009b1ffc)=<r2=>0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100))
write$P9_RGETLOCK(r3, &(0x7f0000000240)={0x29, 0x37, 0x2, {0x1, 0x7fffffff, 0x7fffffff, r1, 0xb, 'trustedbdev'}}, 0x29)
tkill(r1, 0x15)

06:51:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000009ea186a1e7b6007400"/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x1, 0x0)
ioctl$TIOCGICOUNT(r3, 0x545d, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=<r4=>0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000280)=r4)
sched_getaffinity(r4, 0x8, &(0x7f00000001c0))
r5 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x7, 0x6, 0xfffffffffffffffa, 0x0, 0x4, 0x9, 0x1, 0x642, 0x5, 0x7, 0x8, 0x6, 0x4, 0x0, 0x2a, 0x4a, 0xffff, 0x1f, 0x1ff, 0x400, 0x0, 0xfff, 0x6, 0x10000, 0xd7, 0x100000001, 0x200, 0x9, 0x8, 0xbf6, 0x3b4b000000000, 0x200, 0x6, 0x364b9c5d, 0x9, 0x0, 0x4, 0x4, @perf_config_ext={0x79a, 0x70d1}, 0x80, 0x8, 0x0, 0x7, 0x7, 0x101, 0xfffffffffffffffd}, r5, 0x5, r0, 0x1)

06:51:20 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}})

06:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x200000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1947.786944][T24304] binder_alloc: 24297: binder_alloc_buf, no vma
[ 1947.820845][T24301] 9pnet: Insufficient options for proto=fd
06:51:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x300000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x8, 0x80)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000640)={&(0x7f0000ffa000/0x3000)=nil, 0x1, 0x3, 0x20, &(0x7f0000ffa000/0x2000)=nil, 0x7})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/tcp\x00')
ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000005c0))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000120000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={<r5=>0x0, 0xa4, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x1f}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, [], 0x1e}, 0x5}]}, &(0x7f00000001c0)=0x10)
getsockname$netlink(r4, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r5, 0x9}, &(0x7f00000002c0)=0x8)

06:51:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1947.871861][T24311] 9pnet: Insufficient options for proto=fd
06:51:21 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x23, r1}})

06:51:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1948.009122][T24316] binder_alloc: 24313: binder_alloc_buf, no vma
[ 1948.056668][T24319] 9pnet: Insufficient options for proto=fd
06:51:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
r3 = dup3(r2, r0, 0x80000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x202, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xd20}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x90)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1948.115709][T24326] 9pnet: Insufficient options for proto=fd
[ 1948.239750][T24329] binder_alloc: 24328: binder_alloc_buf, no vma
06:51:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:21 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x24, r1}})

[ 1948.701094][T24333] 9pnet: Insufficient options for proto=fd
[ 1948.721735][T24336] 9pnet: Insufficient options for proto=fd
06:51:23 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f00000011c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000001c0)="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", &(0x7f0000000040)="6bba2e5fceb0383fa48758f56c98020b7653e3f41e2a5387524b3f375071c6ce4a2462256b4bfc8cd281052bf97a178e645a6974ae8ee584f74844dc6aa65dfc841e1f737423083ecb0ffbdc46cfecaeb8b3c20ff0d4b72b5470709c74bdabb420fdc600e10d0a31c9faa057f7b3d12f0b5e1e8828b0291b6cd0c99b7086b78d600cd6083def33b730e4d5a04b758f1fdb5015cc06ffa73395489ab4464667515437a97c864b900bf17666c1280e4ff1096a04dc436b686fdba38620ffd822f6375568a44be3977b546c75207a61eeb9223cabfcfdbaf4f7ad06d6468cb6918e02c7b30785982dd53c5536d8"}}, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f0000001300)='/dev/dsp#\x00', 0x1, 0x10800)
write$UHID_CREATE(r1, &(0x7f0000001400)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001340)=""/174, 0xae, 0x94e, 0x3, 0x80, 0x2, 0xd020}, 0x120)
r2 = syz_open_dev$sndpcmc(&(0x7f0000001200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000001240)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x80, &(0x7f0000000180)={{r3, r4+30000000}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10080, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000001280)={0xab, 0x3, 0xffffffffffffffff})

06:51:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x400000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000080)={0x7f, "475945dda4616d2d1a670653abfd237556d6fd63536c93a28e1f4b54fa1fef2c", 0x3, 0x200, 0xcb9, 0x6, 0x1, 0x3, 0xffffffffffff9f4a, 0xa000000000000000})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000a997e01518bff3679a747a46858f3eba1f", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000000000000000000000000000000000973b029700852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:23 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x25, r1}})

06:51:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1950.826871][T24344] 9pnet: Insufficient options for proto=fd
[ 1950.844482][T24348] binder_alloc: 24340: binder_alloc_buf, no vma
[ 1950.868019][T24350] 9pnet: Insufficient options for proto=fd
06:51:24 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x500000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:24 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x26, r1}})

06:51:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1951.052327][T24358] binder_alloc: 24355: binder_alloc_buf, no vma
[ 1951.075707][T24360] 9pnet: Insufficient options for proto=fd
06:51:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x600000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1951.113679][T24363] binder_alloc: 24355: binder_alloc_buf, no vma
[ 1951.129863][T24362] 9pnet: Insufficient options for proto=fd
06:51:24 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x27, r1}})

[ 1951.287195][T24367] 9pnet: Insufficient options for proto=fd
[ 1951.310748][T24369] 9pnet: Insufficient options for proto=fd
06:51:26 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080))
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x218, 0x410, 0x300, 0x410, 0x218, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xe, 0xa6c, 0x100}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@remote, @empty, 0x0, 0xff000000, 'nlmon0\x00', 'team0\x00', {0xff}, {}, 0x1d, 0x2, 0x39}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4, 0x7}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8000, 0x0, @ipv6=@mcast2, 0x4e24}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0x0, 'bond_slave_1\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x3, 0xe, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@broadcast, @empty, 0xff0000ff, 0xffffffff, 'bcsh0\x00', 'eql\x00', {}, {0xff}, 0x77, 0x2, 0x58}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3, 0xc, 0x1, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xffffffffffffee0c, 0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x640)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x700000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:26 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x28, r1}})

[ 1953.881966][T24375] 9pnet: Insufficient options for proto=fd
06:51:27 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="bcbf1abc1a6ac53a76bb31e6e81e636b7c59d25b99cb39cab8149f2fa1417e56dfd1bca22b50294daeaeff180109753db29baf6bb8e4836086074270c8f2c1bd621d3b001d2fdc5eadf5b6b113a9fc0c56a016f4eb6c03da032881a099f781bd7ffe7ffd235f4e7ad3e882a1c1fb3a72801401046c7b092d8f3702a04616223f73b19339e5fc50b2a02b91656ce5fd0be5bee2acffbf6807cf793581c45f72e30eb3246433cb63707b4aa3a859acf34baadf3c0d8cda3c1037e63579cf3d4f04652975a6a01a0353de73fc594718cb0311d5e6ab2e638be13c6f933cd05657571da7626fbfb49114c29b298ee86f734043432239e875e327b9a2e514a616a902")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x800000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1953.991789][T24386] 9pnet: Insufficient options for proto=fd
06:51:27 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x29, r1}})

06:51:27 executing program 1:
r0 = gettid()
r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xe01, 0x2000)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x800000000000, 0x101, 0x4, 0x0, 0x1, 0x10000, 0x0, 0xce24, 0x4, 0x9, 0x3ff, 0xa0, 0x3ff, 0xfb0, 0x3000, 0x5, 0x7, 0x1ff, 0x3, 0x0, 0x101, 0x0, 0x7, 0x396c, 0x7, 0x7fffffff, 0x3, 0x7267, 0xb4c, 0x1, 0x5, 0x7fff, 0x4, 0x6, 0x4, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x300, 0x9b3, 0x9, 0x5, 0x2, 0x8001, 0x9}, r0, 0x7, r1, 0x2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1954.085683][T24389] binder_alloc: 24387: binder_alloc_buf, no vma
[ 1954.130628][T24389] binder_alloc: 24387: binder_alloc_buf, no vma
06:51:27 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r3=>0x0, 0x2c4320b}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x101}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x1000006000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1954.182403][T24396] 9pnet: Insufficient options for proto=fd
[ 1954.212765][T24400] 9pnet: Insufficient options for proto=fd
06:51:27 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40001, 0x0)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x0, 0x3})
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:27 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2a, r1}})

06:51:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1954.329070][T24407] binder: BINDER_SET_CONTEXT_MGR already set
[ 1954.364892][T24407] binder: 24404:24407 ioctl 40046207 0 returned -16
[ 1954.401517][T24410] 9pnet: Insufficient options for proto=fd
[ 1954.419751][T24411] binder_alloc: 24404: binder_alloc_buf, no vma
[ 1954.428884][T24413] 9pnet: Insufficient options for proto=fd
06:51:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x3f00000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=<r2=>0x0)
perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0xfffffffffffffd95, 0x200, 0xef8, 0x561f5489, 0x0, 0x3, 0x80, 0x4, 0x80000000, 0xffff, 0x1000, 0x100000000, 0xfff, 0x8, 0x17b, 0x811a, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x11, 0x7, 0x1, 0x217, 0x200, 0xe5b6, 0x1, 0x8, 0x2, 0x0, 0x4d, 0x3, 0x3f, 0x9, 0x0, 0xfd7, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0xe00, 0x101, 0x7, 0x7, 0x6, 0x9, 0x100000001}, r2, 0xffffffffffffffff, r0, 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8)
ioprio_set$uid(0x3, r3, 0x100)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x80, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x30808}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x98, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2000000000000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040840}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000003000000180200200000000008000000000000007ff405a71e62ab0cd70535cf4f599e5df0dd2d76ba18db8de554d5856c0abeb780cf250614a2285fd47e04c30f0a4ac96cf1ebf843e8a572debb8e39b41ec1781b7ede43c5a76a6318f7a41a37740e5028600f8a0f176aa7e2284df09a30ee199ee57e2ee45d18b7a6696925899a0cc5cb0e241879c93001046b7991bb5f85a5e41c4e338c23e1497992e931b9f29fca7dfeb85506bed68a9c038f21dfde8f89872feacc3bf32d946771beeb21", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:27 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2b, r1}})

06:51:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1954.770969][T24423] binder_alloc: 24422: binder_alloc_buf, no vma
[ 1954.779735][T24424] 9pnet: Insufficient options for proto=fd
[ 1954.826484][T24427] 9pnet: Insufficient options for proto=fd
06:51:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x4000000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:28 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}})

06:51:28 executing program 4:
r0 = perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0xc11a, 0xfffffffffffff22d, 0x3ff, 0x8, 0x0, 0x89, 0x1000, 0xa, 0x9f, 0x6, 0x127440000000000, 0x0, 0x5, 0x100000001, 0xfffffffffffffe00, 0x20, 0x4, 0x6000, 0xffffffffffffff5c, 0x0, 0xf4c5, 0x100000001, 0x63a1, 0x5, 0x81, 0x8001, 0x7fff, 0x8, 0x27a0000000000, 0x1, 0x401, 0x2, 0x5, 0x401, 0x9, 0x3, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x8000, 0x4, 0x6, 0x2, 0x9, 0xfffffffffffffffb, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xf6a)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
sched_getaffinity(r3, 0x8, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="006340400000000000008000000000000000000010000000000000000000000000000000180200200000000008000000000000004d07d730a00f32c4a1626e29e5bb9dab226b951e432a8b21dd3025334a648c4a305b4152f523d592af727dd9e6c475ea02ecfbc991d2411a66210b6146faeed1c56b75afd259974350a63d12f3ef292e1da202ee1c4f527d", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000fffffffffffffffa00"/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x204000, 0x0)
ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080))
r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x604000)
getpeername$llc(r5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x10)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0xf)
ioctl$TCGETS(r5, 0x5401, &(0x7f0000000300))
socket$netlink(0x10, 0x3, 0x13)

[ 1955.057481][T24441] 9pnet: Insufficient options for proto=fd
[ 1955.074394][T24446] 9pnet: Insufficient options for proto=fd
06:51:30 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0x7a})
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/139)
gettid()

06:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xfdfdffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627300000000cf32edc1000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r2, r2, 0xe, 0x2}, 0x10)

06:51:30 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2d, r1}})

06:51:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7b")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1957.427812][T24454] 9pnet: Insufficient options for proto=fd
[ 1957.451370][T24457] binder_alloc: 24451: binder_alloc_buf, no vma
[ 1957.478657][T24459] 9pnet: Insufficient options for proto=fd
06:51:30 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2e, r1}})

06:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0xff00000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x2, 0x2)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000400)={0x8, 0x8001, 0x8, 0xfffffffffffeffff}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x350b6c354f64898a, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})

06:51:30 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @reserved}})
tkill(r0, 0x1000000000016)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/188, 0x1000000, 0x1000, 0xd0}, 0x18)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x571f, 0x101, 0x5, 0x0, 0x200, 0x800, 0x2, 0x7f, 0x0, 0x1, 0xffff, 0x80, 0xfffffffffffffff8, 0xffffffff, 0xc20, 0x4, 0x4, 0xff, 0x5, 0x3, 0x9afe, 0x4, 0x6, 0x3, 0x8, 0x3, 0x0, 0x6, 0x8, 0x8, 0x1, 0x6, 0x7fffffff, 0x4, 0x4, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x2020, 0x4, 0xff, 0x7, 0x200000000, 0xfffffffffffffffa, 0x6}, r0, 0xf, r1, 0x3)

[ 1957.694149][T24472] 9pnet: Insufficient options for proto=fd
[ 1957.711551][T24475] binder: 24471:24475 unknown command 0
[ 1957.719060][T24475] binder: 24471:24475 ioctl c0306201 20000440 returned -22
06:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x2}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1957.749470][T24477] 9pnet: Insufficient options for proto=fd
[ 1957.752007][T24478] binder: 24471:24478 unknown command 0
[ 1957.762307][T24478] binder: 24471:24478 ioctl c0306201 20000440 returned -22
06:51:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="007d4040000000000000000000060000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:30 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2f, r1}})

06:51:31 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0)
tkill(r0, 0x1000000000016)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r4})

[ 1957.917510][T24487] binder: 24485:24487 unknown command 1077968128
[ 1957.935064][T24487] binder: 24485:24487 ioctl c0306201 20000440 returned -22
[ 1957.951409][T24489] 9pnet: Insufficient options for proto=fd
06:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x3}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1957.975974][T24490] binder: 24485:24490 unknown command 1077968128
[ 1957.988704][T24492] 9pnet: Insufficient options for proto=fd
[ 1957.995957][T24490] binder: 24485:24490 ioctl c0306201 20000440 returned -22
06:51:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be0")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:31 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x30, r1}})

06:51:31 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

06:51:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x4}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:31 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x0})

[ 1958.291946][T24505] 9pnet: Insufficient options for proto=fd
[ 1958.321318][T24509] 9pnet: Insufficient options for proto=fd
06:51:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:31 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x31, r1}})

06:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x5}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1958.395961][T24514] binder_alloc: 24511: binder_alloc_buf, no vma
06:51:31 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x100, 0x0, 0x7f, 0x20, 0x61, 0x9})

[ 1958.499594][T24521] 9pnet: Insufficient options for proto=fd
[ 1958.527631][T24523] 9pnet: Insufficient options for proto=fd
[ 1958.562747][T24526] binder_alloc: 24524: binder_alloc_buf, no vma
06:51:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffa4, &(0x7f0000000180))
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)
tkill(r1, 0x1000000000016)

06:51:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x6}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:34 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x32, r1}})

06:51:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
socket(0x0, 0x2, 0x6)

06:51:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be0")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1961.065541][T24535] binder_alloc: 24533: binder_alloc_buf, no vma
[ 1961.115160][T24536] 9pnet: Insufficient options for proto=fd
[ 1961.149788][T24542] 9pnet: Insufficient options for proto=fd
06:51:34 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x33, r1}})

06:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x7}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:34 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r2=>0x0, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30)
syz_open_procfs(r2, &(0x7f00000000c0)='environ\x00')
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:34 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
r2 = geteuid()
r3 = geteuid()
r4 = getuid()
fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f00000028c0)=<r6=>0x0, &(0x7f0000002900), &(0x7f0000002940))
getgroups(0x1, &(0x7f0000002980)=[<r7=>0x0])
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002a40)={@empty, 0x8000, 0x0, 0x1, 0xc, 0x7, 0x8000}, 0x20)
r8 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f00000029c0)='cpuset.memory_migrate\x00', 0x2, 0x0)
r9 = socket$kcm(0x29, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)={0x16, 0x8, 0x20, 0x3, 0x9, 0xffffffffffffff9c, 0x80000001, [], 0x0, 0xffffffffffffff9c, 0x5, 0x4}, 0x3c)
r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003d80)='/dev/loop-control\x00', 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r13 = syz_open_procfs(r0, &(0x7f0000003dc0)='attr/fscreate\x00')
r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r15 = syz_open_dev$vcsn(&(0x7f0000003e00)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x0)
r16 = socket$rxrpc(0x21, 0x2, 0x2)
r17 = mq_open(&(0x7f0000003e40)='TIPCv2\x00', 0x2, 0x48, &(0x7f0000003e80)={0xfffffffffffffffa, 0xa9, 0xecb2, 0x1, 0x3ff, 0x3, 0x9, 0x34})
sendmsg$netlink(r1, &(0x7f0000003f80)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000740)={0x1010, 0x3d, 0x1, 0x70bd25, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}, {&(0x7f0000001780)={0x1130, 0x36, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@generic="8308309d693dc6f051c486f9d1e70cc77c54300cc803cc54f0ee7e62462ac3fff4d6874b1679bfeca42025afe89ebe5f5622d36bd12122a8ae0a7f235f929df87ab4be5aa4972d72cfd968a705c17d5d9ab4985dd8461bd68b1f85e5e70a6efeec7a44417b9d27cf66ed9ad49239756411ed413ab07d9ec2b8501109503a92ac0a33a87782ff119e7fdc66c7e655f51af33c905ed089dd20b127b4ea6879c3a07bd7678bd65936e1b85e1304af", @typed={0x8, 0x75, @uid=r2}, @generic="b93e10e3073fb90b2602d4d4a908b42fd7f7aba6f65315f58e9d6b167d60505c404be137b6feab62a7d6d16ee3b76cd05a3337347ef469704d3dc1bc20904c9dce901840f41bf9a61da61771236ecdd1baf75e046b7bd402897a316443f4526ee30c2c7eac599ede904a", @generic="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"]}, 0x1130}, {&(0x7f0000000200)={0x19c, 0x1c, 0x70c, 0x70bd27, 0x25dfdbfd, "", [@generic="9e29f92aa3de04c121fd9bb503f0fefdcb81ef9b4c248ecfb5fe01e6b49608f3a8ea4a72e0f4b9082476adda96e24035781dcf25c53c04e59a0d318b985544aff6a4d59ba24555a8a0dab2eb46d06f4c2fce34bb666889bf20fe57ab96cf4493a12140de85b5f578897cd7c680169796b2c7cb6d2b0e1353b65fabeaaaea13476357f681cceba2281b87cae834a9ceed7edf85f1cd4712205fb6b0ff6b0de5918757c6f4bb9f753d8fd6ee67d146f793faf44e6a0b30e55866b59028d3a1d1be57ac268b2b37a0ad88488d10f4cd7bdfe04187cf4d5d672765475d757d8bd53aff7ab12747", @nested={0xc, 0x90, [@typed={0x8, 0x94, @uid=r3}]}, @typed={0x70, 0x8a, @binary="ddbe6920acdf77728d1d54544d45c1cbdcb715a853867eaef28dee1e622bb6500da2aee46a08394aa934cdfd3426f7b14752958c0c36485164f64f489dffee3d7c69fb41a458e5849940cf544795c502b4d9a10683bdcccad54122a348a1ce913b155c10440fa648e2"}, @typed={0x8, 0x5d, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @nested={0x4, 0x4d}, @nested={0x1c, 0x6, [@typed={0xc, 0x6d, @u64=0x8}, @typed={0xc, 0x78, @u64=0x1}]}]}, 0x19c}], 0x3, &(0x7f0000003ec0)=[@cred={{0x1c, 0x1, 0x2, {r0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r7}}}, @rights={{0x28, 0x1, 0x1, [r8, r9, r10, r11, r12, r13]}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r16, r17]}}], 0x88, 0x4}, 0x1)
r18 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x3b)
sendmsg$nl_xfrm(r13, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)=@delsa={0x9c, 0x11, 0x8, 0x70bd26, 0x25dfdbff, {@in6=@empty, 0x4d6, 0x2, 0xff}, [@algo_auth_trunc={0x74, 0x14, {{'sha256-arm64\x00'}, 0x128, 0xc0, "d627730c35d92bbb0a996a734b69d254c2abc7b2b7befdbe262a517c990d4cb4cce277eea3"}}]}, 0x9c}}, 0x20000000)
r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r18, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="622deb84309a0c7851bd30a297c6c42a00", @ANYRES16=r19, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000090)

[ 1961.350525][T24558] 9pnet: Insufficient options for proto=fd
[ 1961.353212][T24559] binder_alloc: 24555: binder_alloc_buf, no vma
06:51:34 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x36)

[ 1961.393768][T24562] 9pnet: Insufficient options for proto=fd
[ 1961.418148][T24565] binder_alloc: 24555: binder_alloc_buf, no vma
06:51:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x36, 0x50000)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4)

06:51:34 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x34, r1}})

06:51:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x8}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:34 executing program 1:
open$dir(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
tkill(0x0, 0x1a)
r1 = gettid()
write$binfmt_script(r0, 0x0, 0xfffffffffffffe67)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
write$cgroup_subtree(r0, 0x0, 0xfffffffffffffeb2)
tkill(r1, 0x1000000000016)

[ 1961.600328][T24573] 9pnet: Insufficient options for proto=fd
[ 1961.630024][T24578] 9pnet: Insufficient options for proto=fd
06:51:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be0")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x804)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="086310400200000000000000000000000000000012634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730b1100000200000000000000000000000000000085616466000000000600000000000000010000000000000028000000000000008561646600000000080000000000000001000000000000003900000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="001000000000000006630440020000000463044001000000086310400000000000000000000000000000000001634040030000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="85616466000000000200000000000000020000000000000012000000000000008561646600000000040000000000000000000000000000003f00000000000000852a6277001000000100"/88], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']], 0xa4, 0x0, &(0x7f0000000580)="1e7fcc4165649e9e434af2e2bc478453a9b205a3be33ed83e2605f48c0d6081be174bc79dbab58ba57f85da5fe20ffb8e3f7430f56c29d682b71883da3fc5f5d9b9b2d4cd9b619280097eb875e8a0eaadc9a26e5da3bd54c26e8633428f0f93de7053e71b27236be1fb1493783124a0deebfe7745651d5195268816c526498440a42aea9cf2d70e9a956a26e868bb7b3ca3e03984e60dadc3402b550ed25f70aa3b410b3"})
r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x2, 0x5, 0x2, 0x3ff, 0x0, 0x6, 0x2000, 0xd, 0x8d8, 0x8, 0x1, 0x400, 0x6e, 0x3, 0x7, 0x6, 0x100000001, 0x5, 0x4, 0x7fff, 0xda, 0xac, 0x3, 0x7fff, 0x2, 0xee5, 0x5, 0x4, 0x1f, 0x86e1, 0x3, 0x2, 0x0, 0x57, 0x8, 0x6, 0x0, 0x80000000, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x9, 0x2, 0x3, 0x1, 0x6, 0x4}, r1, 0xf, r0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000700)={0x9b0004, 0x4, 0x6, [], &(0x7f00000006c0)={0x9b0903, 0x0, [], @p_u16=&(0x7f0000000400)=0x4}})
r4 = syz_open_pts(0xffffffffffffffff, 0x204000)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})

06:51:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x35, r1}})

06:51:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x10d}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:35 executing program 1:

[ 1961.965248][T24589] binder_alloc: 24585: binder_alloc_buf, no vma
[ 1961.983509][T24591] 9pnet: Insufficient options for proto=fd
06:51:35 executing program 1:

[ 1962.009640][T24594] 9pnet: Insufficient options for proto=fd
06:51:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x36, r1}})

06:51:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x20000)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x300}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:35 executing program 1:

[ 1962.193988][T24601] 9pnet: Insufficient options for proto=fd
[ 1962.207881][T24605] binder_alloc: 24604: binder_alloc_buf, no vma
[ 1962.236447][T24607] 9pnet: Insufficient options for proto=fd
06:51:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x37, r1}})

06:51:35 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fstat(r0, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:35 executing program 1:

06:51:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x500}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:36 executing program 1:

[ 1962.936085][T24621] 9pnet: Insufficient options for proto=fd
[ 1962.942540][T24619] binder_alloc: 24615: binder_alloc_buf, no vma
[ 1962.994696][T24624] 9pnet: Insufficient options for proto=fd
06:51:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:36 executing program 4:
r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2f, 0x212303)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, r0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0x4080000000000000, 0x4002, 0xc575, 0x4, 0x16})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:36 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x38, r1}})

06:51:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v3, 0x18, 0x0)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.capability\x00', 0x0, 0x2)

06:51:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x600}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1963.191173][T24634] binder_alloc: 24631: binder_alloc_buf, no vma
[ 1963.225376][T24635] 9pnet: Insufficient options for proto=fd
[ 1963.255534][T24641] 9pnet: Insufficient options for proto=fd
[ 1963.270162][T24643] binder: BINDER_SET_CONTEXT_MGR already set
[ 1963.315265][T24643] binder: 24631:24643 ioctl 40046207 0 returned -16
06:51:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x700}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x190)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x36, 0x2f, 0x17, 0x1a, 0x0, 0x9, 0x1, 0x7f})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:36 executing program 1:

06:51:36 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x39, r1}})

06:51:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1963.531202][T24658] binder_alloc: 24655: binder_alloc_buf, no vma
[ 1963.541574][T24657] 9pnet: Insufficient options for proto=fd
06:51:36 executing program 1:

06:51:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xd01}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1963.599218][T24663] 9pnet: Insufficient options for proto=fd
06:51:36 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x40000, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:36 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3a, r1}})

06:51:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:36 executing program 1:

[ 1963.789984][T24671] binder_alloc: 24667: binder_alloc_buf, no vma
06:51:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1963.831917][T24671] binder_alloc: 24667: binder_alloc_buf, no vma
[ 1963.840430][T24674] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040c83f00000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, &(0x7f0000000040)})

[ 1963.885427][T24677] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 1:

06:51:37 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3b, r1}})

06:51:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x2000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:37 executing program 1:

06:51:37 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1964.090942][T24687] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1964.150221][T24694] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000001480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/148, 0x94, 0x0, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x440}], 0x9b, 0x0, &(0x7f0000000040)="995babd11b4c15dcd27d04ff7ebcbd297bb98de7cc09b47ed6e6bc9e860040fc4bdc520ea4f3194b8afd9ee82ca94e784ec7ee60a729432254c249224d05c63e109592d86e8e5088c619c5b1a2e34fba1b978ffd20c172cd88aaafb663722eea58774e32b758f99d1e88e0445dcd09ee8d26a652fe832f62732794ce22ebd5673072567c64899e8262d9bcdbe602e1b4f7643ca00236b1dfe140d8"})

06:51:37 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3c, r1}})

06:51:37 executing program 1:

06:51:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x3f00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1964.368395][T24705] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x1}, 0x3, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)

06:51:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1ff, 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400c010}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1c8, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20ef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff57}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff81}]}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffb6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1964.424866][T24710] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:37 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x3d})

06:51:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x4000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:37 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x11)
connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0xfffffffffffffef1, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x1}, 0x3, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f420f000000000000580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0)
lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000280)={'U+', 0x10000}, 0x28, 0x0)

06:51:37 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x16}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, &(0x7f00000003c0)})

06:51:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1964.699356][T24729] 9pnet: Insufficient options for proto=fd
[ 1964.716126][T24730] 9pnet: Insufficient options for proto=fd
06:51:37 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}})

06:51:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xff00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="3cb146b0b8ea5ffc76690dc89bb6ae5c1340af1409a91609", 0x18)

06:51:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x40000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:38 executing program 1:
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="3cb146b0b8ea5ffc76690dc89bb6ae5c1340af1409a91609", 0x18)

06:51:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x2, 0x6, 0x2, 0x0, 0x810, 0x20101, 0xd, 0x1ff, 0x0, 0x8, 0x5b, 0x9, 0x9adb, 0x2, 0xbd, 0xd72, 0x80, 0x7, 0x100, 0xff, 0x5, 0x0, 0x6, 0x89, 0x200, 0x2, 0x9, 0x20, 0xffffffffffffff2b, 0x1, 0x1, 0x35, 0x516dc767, 0x1, 0x2, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x6}, 0x8000, 0x5, 0x5, 0x6, 0x465f, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x200000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1965.364752][T24775] binder: BINDER_SET_CONTEXT_MGR already set
[ 1965.379083][T24775] binder: 24768:24775 ioctl 40046207 0 returned -16
06:51:38 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}})

06:51:38 executing program 1:

06:51:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:38 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fchmod(r0, 0x8c)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2c6782, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x4, 0x36, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x1)

06:51:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x80ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:38 executing program 1:

06:51:39 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x33ac559, 0xe000)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))

06:51:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xf0ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:39 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)

06:51:39 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x4}})

06:51:39 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:39 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x67, 0x5, 0x2e4, 0x1}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7d6, 0x401, 0x9, 0x3, 0x6, 0x3, 0x6, 0x8, 0x73, 0x40, 0x17, 0xffffffffffff6a19, 0x3, 0x38, 0x1, 0x10000, 0x1, 0x4}, [{0x7, 0x7, 0x0, 0x8001, 0x2, 0x1000, 0x0, 0x1}], "2d4f6caebff8667588c371741891b194d115fda2f023c714164d5afdfb10463b08b4044022e0fb711a3b77f136853af0b094c902247daf493b7b9671fd391fd641a7d690dd6d7964bebdcc2139f107492dd3edcc5585237a7bf1911462b253014e55f6c8e3c3f2bb64ced20ea314f78d517a93431f5f520806c8086051d215bbbb734fb11f89f6a5", [[], [], [], [], [], [], []]}, 0x800)
ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000000c0))

06:51:39 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x803, 0x1)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x0, @broadcast}}}, 0x90)

06:51:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x1000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:39 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

[ 1966.815434][T24818] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1966.815441][T24818] binder_alloc: 24813: binder_alloc_buf, no vma
06:51:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x10d0000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfec7be070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000180007041dfffd946f6105000a00000a1f000007002808000800080004001000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)

06:51:40 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = semget(0x2, 0x3, 0x5)
semctl$GETVAL(r2, 0x7, 0xc, &(0x7f0000000040)=""/5)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xf1, 0x7, 0x100000001, "93ed565791fa9b3a69f8c27740ae3027", "a47e00f4312cd262c3f705ed06fb636f084b37d5cc9764a6e8865ffa05c466c9310d7ef5ffbd4cc15127d0b5fa922d021e98c43e4a3a619036a0700410d8a40df33de60598ad802e64a760e5606304b401f403ef296cb65eb7a4c9c8fe12eed87c9dfdeb5e1d726b010799241566aec7e98ba43cb585a4ed0d8097ee5b18125fbdb0de7c44d8f57e49e045f3138960870c99e561b3358b2f5eb8b778cd2bbc27d9de9cb759480e1b5c9e6dd3a91de87dd0ea1edf88888b493956558aec3baac9a5457af28290bade17ac3b9eecc24d2c82144fab4170730d7d00e136"}, 0xf1, 0x3)

[ 1967.116759][T24839] binder_alloc: 24836: binder_alloc_buf, no vma
[ 1967.117591][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1967.155533][T24839] binder: BINDER_SET_CONTEXT_MGR already set
[ 1967.182945][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1967.198480][T24839] binder: 24836:24839 ioctl 40046207 0 returned -16
06:51:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x2000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:40 executing program 1:
select(0x40, &(0x7f0000000280), 0x0, 0x0, 0x0)

06:51:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:40 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x5}})

06:51:40 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000080000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/157, 0x9d, 0x0, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/252, 0xfc, 0x0, 0x3b}, @fda={0x66646185, 0xa, 0x0, 0x1f}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x77682a85, 0x100, 0xf800000000000000}, @flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/230, 0xe6, 0x2, 0x14}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x3}], 0x57, 0x0, &(0x7f0000000740)="017516142f544ea6b6007c0ab4d3560d985a79199faceba956d8423173ad683835565163c8812ca4c8f06756904be26657b10a78d45f50169cf16e31b05799f5c52c28dbbb49dd17f3e75220b4f77188db4d089d8871d8"})

[ 1967.743613][T24859] binder_alloc: 24852: binder_alloc_buf, no vma
06:51:40 executing program 4:
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@null, @bcast, @bcast, @netrom, @null, @default, @rose, @null]}, &(0x7f00000001c0)=0x48)
fremovexattr(r0, &(0x7f0000000380)=@random={'osx.', 'efs\x00'})
mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='efs\x00', 0x401, &(0x7f0000000100)='\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x3000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1967.906997][T24866] binder_alloc: 24865: binder_alloc_buf, no vma
06:51:41 executing program 4:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r0=>0x0)
getpgid(r0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = dup(r1)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18)
r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000018020020000000000800000000000000d65a7f4cd5b85f996824b8b45c9ad8a326a5b68116205583fc156a0230c0e2e00e5448b3f2d1c120ee0073c1242e82ea7b4b9cf2b49216425a22d8ac9b1d108f68a344fd17aeb47b99a85b5356af79729b538c83a0f561d6a0a84d7eea0231b51fe882157309000000f43f9393c21efe6727046feba1ee248be57c0e44d0aca9c71fb75150ee632a3144198d3c39d78d16c8e3c8ae950b8ff418502c4a5c1dfe8f482633e136504f0d3a43385ab6b1c010d0d0f19e15511063d852d6dec762e48767c1a659b44b452ac3e558dbadbc8662a791e3dc0f0e321cbecce1c5bcfe05d53309440fc78aa40c44aedc1a8200"/290, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0))

06:51:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1967.970199][T24866] binder_alloc: 24865: binder_alloc_buf, no vma
06:51:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1968.107256][T24878] binder: 24877:24878 unknown command 0
[ 1968.137140][T24878] binder: 24877:24878 ioctl c0306201 20000440 returned -22
[ 1968.171221][T24882] binder: 24877:24882 unknown command 0
[ 1968.194829][T24882] binder: 24877:24882 ioctl c0306201 20000440 returned -22
06:51:41 executing program 1:
select(0x40, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={0xb4, 0x7fff})

06:51:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:41 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6}})

06:51:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000cb"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x5000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1968.687724][T24897] binder_alloc: 24895: binder_alloc_buf, no vma
06:51:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:41 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x6, 0x1, 0x4, 0x4, 0xb, 0x5, 0x5, 0x7, 0x4f, 0x3edf7b6e, 0x5, 0x1ff})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x6000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:42 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
flock(r0, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1969.029020][T24919] binder_alloc: 24918: binder_alloc_buf, no vma
06:51:42 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

06:51:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:42 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}})

06:51:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{0x0}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x7000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x7f, 0xffffffffffffff00, 0x0)

06:51:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000040), 0x8, 0x800)
recvfrom$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x800e0058d)

06:51:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1969.673974][T24933] binder_alloc: 24932: binder_alloc_buf, no vma
06:51:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{0x0}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1969.733317][T24937] binder_alloc: 24932: binder_alloc_buf, no vma
06:51:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @multicast2}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000080)=0xe8)
bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)

06:51:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x8000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f00000000c0)={0x6, [0x7, 0x9, 0x1, 0x8, 0x0, 0x1c00000000000000]}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0076e)

[ 1969.862764][T24948] binder_alloc: 24947: binder_alloc_buf, no vma
06:51:43 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{0x0}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:43 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}})

06:51:43 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000004, 0x4, 0x81000)
syncfs(r0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r3=>0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/igmp\x00')
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, <r5=>0x0]}, &(0x7f0000000100)=0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x4}}, [0x65, 0x7ff, 0x6, 0x27b2, 0x4, 0x1, 0x1, 0x0, 0x6, 0x3, 0x3, 0x200, 0x6707d7f0, 0x6, 0x6]}, &(0x7f00000001c0)=0x100)

06:51:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x10000060}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:43 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:43 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:43 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x200040000000002)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000000000000040000000000000000000000576adbfcc9768ba41c74edfc4e7548a80a2a962d390816a82813f9eb2048fd0b86c664ef203f508aef55a6ee1a7661d46337b0c818337cde28e88f067327df43878f5ecc7158eed08a6e8aae59958c3aabc232012e48bf18895428a71cf7a2286164708b3cd3132973c37df0e091a365a30b627d10574cc033cc4b42ea7f5b6ca01b63ea34ced6700a5621ecb7fa2b67946ab17709d570eba54e37dbdd84e77d18eb9aa3645a4bf4bbbd5ca8a85b1c1d2fa0107435d0677de7d88121c9e128372479ff9a3908a843126b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x3f000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:44 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote={0xac, 0x14, 0x0}, @remote, @local={0xac, 0x14, 0x0}}}}}, 0x0)

06:51:44 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x400100, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000340)={{0x1, 0x1, 0x7fff, 0x2}, 0x4000000000000000, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x1, 0xffff, 0xd00, 0x20})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0040000000000000000000000000000000ae2ee27a0000000000000000000000000018020020000080000800000000000000bfcf", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6206001c000000000000000000000000000000000000852a62730000000000000000000000000000000000000000000000000000000000000000000000f70000000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0x0, 0x0, &(0x7f00000003c0)})
r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xdd62, 0x383500)
ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000080)={0xfffffffffffff000, 0x98, "c1f3354a497973e940e30f2ce812e71e7e2891b973462176433a0fc79d134e1a1e25e5fc107b42945f580d1fb653fc77875f6e1d3b8f63064e4220129600db9e34608599c4b98f2d525b4bd13381f3b90e4ef45c866f5c8be12eee523f20d9d1b8317564e3af04b469e289e83ac2d44e61bcc270bb6d207a2b1137afc02ca9be347f41e7f761a2a4f5fd2ea317a77eb1b0d58f0f3f3428d8"})
accept$nfc_llcp(r2, &(0x7f0000000440), &(0x7f00000004c0)=0x60)

06:51:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

[ 1971.081003][T24998] binder: 24996:24998 unknown command 16384
[ 1971.103238][T24998] binder: 24996:24998 ioctl c0306201 200001c0 returned -22
[ 1971.145194][T25002] binder: 24996:25002 unknown command 16384
[ 1971.153933][T25002] binder: 24996:25002 ioctl c0306201 200001c0 returned -22
06:51:44 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}})

06:51:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:44 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote={0xac, 0x14, 0x0}, @remote, @local={0xac, 0x14, 0x0}}}}}, 0x0)

06:51:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:44 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="f50a17287cfdd0346523898b33da4426661e797f374acb4d185e3e093887055fd43b6ff2c0e2c918f0cd60f743b2b678abf3dc5cf4f3c21e41acd529bb945b0e2c17b542b98ef6e40032289c2e210e463fd95da6122f56c7d09bb2d3ad10d6127189fc085783a7a86047733b640ae1e1d4f5de9b3658c8f3d4f10feea2c1624d5f50ce3aafdce2fbf210d193d9dab1b746e7fc49e88a23593bdad117", 0x9c)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00d2d)

06:51:44 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=[@acquire], 0xfffffffffffffd36, 0x0, &(0x7f00000003c0)})

06:51:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x60000010}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1971.837733][T25025] binder: 25024:25025 unknown command 0
[ 1971.856848][T25025] binder: 25024:25025 ioctl c0306201 20000440 returned -22
[ 1971.900537][T25030] binder: 25024:25030 unknown command 0
[ 1971.919906][T25030] binder: 25024:25030 ioctl c0306201 20000440 returned -22
06:51:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1972.091877][T25033] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1972.091886][T25033] binder_alloc: 25032: binder_alloc_buf, no vma
06:51:45 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}})

06:51:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xfdfdffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x3a000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000002c0)={0x7, 0x1, 0x1000, 0x0, 0x1ff, 0x5c75})
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2400, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={<r4=>0x0, 0x4, 0x7}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100)={r4, 0x37, "9e2a8a64346d1d8f63c2781523e58406508f05818844c149224809d9d72191194a705354116b242094d68ed208bbb2e12ec02cdbd07300"}, &(0x7f00000001c0)=0x3f)

06:51:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1972.608944][T25045] binder_alloc: 25044: binder_alloc_buf, no vma
06:51:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x49, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007e8)

06:51:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6)
r2 = socket(0x1e, 0x0, 0x2)
ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018020020000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000100000000000000000000e1c11b04f6ea37cda82cbcb4f23c1ee2f15aa840b553f65b8d40bcfab72b2dfc72740da154a2b4e389161d722c400bf06e90e797e0dc6fb91d1110734864debb23ea1ba6bec66879244edea3507bbad47ab58833c3a0e94f979d4e1a2b99babf8eb637cd12e0f5b75c249b26a11df3e1e4e1ce5d84279adf77017ce770e12e691f5d0c66bead4011ec4b"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xff000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:47 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x300}})

[ 1974.670319][T25058] binder_alloc: 25055: binder_alloc_buf, no vma
06:51:47 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x5, 0x0, &(0x7f0000000080)="1b746ef346f51829520268053ee8e832c1fe4b0a6cf323f7301e496f185c51dc4af9b66c32e7dcfdd2fc0841ed4e64ed7e92ab3c859adb"})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'nr0\x00', 0x7})

06:51:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xffff8000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xfffff000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:48 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001802002000000000080000000000e300", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62730000000000000000000000000000000000000000852a627300"/72], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

[ 1975.019041][T25086] binder_alloc: 25085: binder_alloc_buf, no vma
06:51:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x31, 0x0, &(0x7f0000000040)="a1f6e8b1935862a3179038f57db0ee1d37313968fb214e4ed6f9332297b44dbdbfecfcde93b8172d1db60600654626d0f8"})

06:51:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xfffffdfd}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:50 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x440}})

06:51:50 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00')
write$cgroup_pid(r0, &(0x7f0000000100), 0x12)

06:51:50 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/252, 0xfc}], 0x1, 0x0)

06:51:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz0\x00')
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

06:51:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x4000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), 0xc)

06:51:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 1978.007348][T25114] binder_alloc: 25112: binder_alloc_buf, no vma
06:51:51 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

06:51:53 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:53 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
fcntl$lock(r0, 0x24, &(0x7f0000000140))

06:51:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x20000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
io_setup(0x2, &(0x7f0000000080))

06:51:53 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x500}})

06:51:54 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0)

06:51:54 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc6a1)
r1 = socket(0xa, 0x2, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)
utime(&(0x7f0000000080)='./file0\x00', 0x0)

06:51:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x80ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x0, 0x146})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

06:51:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xf0ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1981.241811][T25151] cannot load conntrack support for proto=7
[ 1981.905123][T25155] cannot load conntrack support for proto=7
06:51:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x0)

06:51:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x100000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:57 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x600}})

06:51:57 executing program 4:
syz_mount_image$xfs(&(0x7f0000000440)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000340)='XFSB', 0x4}], 0x0, 0x0)

06:51:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000)
r2 = dup(r1)
clock_gettime(0x0, 0x0)
write$evdev(r2, &(0x7f0000000240)=[{{}, 0x0, 0x0, 0x931}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
close(r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
shmget$private(0x0, 0x1000, 0x78000208, &(0x7f0000fff000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001f80))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)

06:51:57 executing program 1:

06:51:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x10d000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:51:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:51:57 executing program 1:

06:51:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x200000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1984.359810][ T2495] print_req_error: I/O error, dev loop2, sector 248 flags 0
[ 1984.371648][ T2495] print_req_error: I/O error, dev loop2, sector 0 flags 801
06:52:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:52:00 executing program 1:

06:52:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000)
r2 = dup(r1)
clock_gettime(0x0, 0x0)
write$evdev(r2, &(0x7f0000000240)=[{{}, 0x0, 0x0, 0x931}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
close(r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
shmget$private(0x0, 0x1000, 0x78000208, &(0x7f0000fff000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001f80))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)

06:52:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x300000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:00 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x700}})

06:52:00 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000)
r2 = dup(r1)
clock_gettime(0x0, 0x0)
write$evdev(r2, &(0x7f0000000240)=[{{}, 0x0, 0x0, 0x931}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
close(r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
shmget$private(0x0, 0x1000, 0x78000208, &(0x7f0000fff000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001f80))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)

06:52:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x400000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:00 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000)
r2 = dup(r1)
clock_gettime(0x0, 0x0)
write$evdev(r2, &(0x7f0000000240)=[{{}, 0x0, 0x0, 0x931}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)
add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
close(r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
shmget$private(0x0, 0x1000, 0x78000208, &(0x7f0000fff000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001f80))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)

[ 1987.312159][ T2495] print_req_error: I/O error, dev loop2, sector 248 flags 801
[ 1987.319947][ T2495] Buffer I/O error on dev loop2, logical block 31, lost async page write
06:52:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x500000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:00 executing program 4:

[ 1987.641643][ T2496] print_req_error: I/O error, dev loop2, sector 248 flags 801
[ 1987.649298][ T2496] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1987.659940][ T2496] print_req_error: I/O error, dev loop2, sector 256 flags 801
[ 1987.667541][ T2496] Buffer I/O error on dev loop2, logical block 32, lost async page write
[ 1987.676496][ T2496] print_req_error: I/O error, dev loop2, sector 264 flags 801
[ 1987.684076][ T2496] Buffer I/O error on dev loop2, logical block 33, lost async page write
[ 1987.721232][ T2496] print_req_error: I/O error, dev loop2, sector 272 flags 801
[ 1987.728919][ T2496] Buffer I/O error on dev loop2, logical block 34, lost async page write
06:52:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:52:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x600000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:03 executing program 4:

06:52:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:03 executing program 1:

06:52:03 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x900}})

06:52:03 executing program 4:
r0 = semget(0x2, 0x0, 0x0)
semop(r0, &(0x7f0000000040)=[{}, {0x5}], 0x2)

06:52:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070")
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/26)

06:52:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x700000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:03 executing program 4:
r0 = socket(0x100000800000011, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00')
sendfile(r0, r1, &(0x7f00000006c0)=0x2a3, 0x92da)

06:52:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2})

06:52:03 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80840, 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50)
unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200)

06:52:04 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = dup(r1)
clock_gettime(0x0, 0x0)
write$evdev(r2, &(0x7f0000000240)=[{{}, 0x0, 0x0, 0x931}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)
add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
close(r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
shmget$private(0x0, 0x1000, 0x78000208, &(0x7f0000fff000/0x1000)=nil)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)

06:52:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x800000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2})

06:52:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x67, 0x5, 0x2e4, 0x1}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7d6, 0x401, 0x9, 0x3, 0x6, 0x3, 0x6, 0x8, 0x73, 0x40, 0x17, 0xffffffffffff6a19, 0x3, 0x38, 0x1, 0x10000, 0x1, 0x4}, [{0x7, 0x7, 0x0, 0x8001, 0x2, 0x1000, 0x0, 0x1}], "2d4f6caebff8667588c371741891b194d115fda2f023c714164d5afdfb10463b08b4044022e0fb711a3b77f136853af0b094c902247daf493b7b9671fd391fd641a7d690dd6d7964bebdcc2139f107492dd3edcc5585237a7bf1911462b253014e55f6c8e3c3f2bb64ced20ea314f78d517a93431f5f520806c8086051d215bbbb734fb11f89f6a5", [[], [], [], [], [], [], []]}, 0x800)
ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000000c0))

06:52:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:04 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1020}})

[ 1991.223820][T25281] binder_alloc: 25274: binder_alloc_buf, no vma
06:52:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x1000006000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x2})

06:52:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x67, 0x5, 0x2e4, 0x1}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7d6, 0x401, 0x9, 0x3, 0x6, 0x3, 0x6, 0x8, 0x73, 0x40, 0x17, 0xffffffffffff6a19, 0x3, 0x38, 0x1, 0x10000, 0x1, 0x4}, [{0x7, 0x7, 0x0, 0x8001, 0x2, 0x1000, 0x0, 0x1}], "2d4f6caebff8667588c371741891b194d115fda2f023c714164d5afdfb10463b08b4044022e0fb711a3b77f136853af0b094c902247daf493b7b9671fd391fd641a7d690dd6d7964bebdcc2139f107492dd3edcc5585237a7bf1911462b253014e55f6c8e3c3f2bb64ced20ea314f78d517a93431f5f520806c8086051d215bbbb734fb11f89f6a5", [[], [], [], [], [], [], []]}, 0x800)
ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000000c0))

[ 1991.354673][ T2496] print_req_error: I/O error, dev loop2, sector 888 flags 0
[ 1991.362622][ T2496] print_req_error: I/O error, dev loop2, sector 0 flags 801
06:52:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x3f00000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x804)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="086310400200000000000000000000000000000012634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730b1100000200000000000000000000000000000085616466000000000600000000000000010000000000000028000000000000008561646600000000080000000000000001000000000000003900000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="001000000000000006630440020000000463044001000000086310400000000000000000000000000000000001634040030000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="85616466000000000200000000000000020000000000000012000000000000008561646600000000040000000000000000000000000000003f00000000000000852a6277001000000100"/88], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']], 0xa4, 0x0, &(0x7f0000000580)="1e7fcc4165649e9e434af2e2bc478453a9b205a3be33ed83e2605f48c0d6081be174bc79dbab58ba57f85da5fe20ffb8e3f7430f56c29d682b71883da3fc5f5d9b9b2d4cd9b619280097eb875e8a0eaadc9a26e5da3bd54c26e8633428f0f93de7053e71b27236be1fb1493783124a0deebfe7745651d5195268816c526498440a42aea9cf2d70e9a956a26e868bb7b3ca3e03984e60dadc3402b550ed25f70aa3b410b3"})
r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x2, 0x5, 0x2, 0x3ff, 0x0, 0x6, 0x2000, 0xd, 0x8d8, 0x8, 0x1, 0x400, 0x6e, 0x3, 0x7, 0x6, 0x100000001, 0x5, 0x4, 0x7fff, 0xda, 0xac, 0x3, 0x7fff, 0x2, 0xee5, 0x5, 0x4, 0x1f, 0x86e1, 0x3, 0x2, 0x0, 0x57, 0x8, 0x6, 0x0, 0x80000000, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x9, 0x2, 0x3, 0x1, 0x6, 0x4}, r1, 0xf, r0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000700)={0x9b0004, 0x4, 0x6, [], &(0x7f00000006c0)={0x9b0903, 0x0, [], @p_u16=&(0x7f0000000400)=0x4}})
r4 = syz_open_pts(0xffffffffffffffff, 0x204000)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})

[ 1991.528462][T25295] binder_alloc: 25292: binder_alloc_buf, no vma
06:52:04 executing program 1:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3, r0}, 0x2c, {'wfdno', 0x3d, r1}})

06:52:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05', 0x2})

06:52:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x4000000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 1991.677272][T25301] binder_alloc: 25300: binder_alloc_buf, no vma
06:52:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x804)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="086310400200000000000000000000000000000012634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730b1100000200000000000000000000000000000085616466000000000600000000000000010000000000000028000000000000008561646600000000080000000000000001000000000000003900000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="001000000000000006630440020000000463044001000000086310400000000000000000000000000000000001634040030000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="85616466000000000200000000000000020000000000000012000000000000008561646600000000040000000000000000000000000000003f00000000000000852a6277001000000100"/88], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']], 0xa4, 0x0, &(0x7f0000000580)="1e7fcc4165649e9e434af2e2bc478453a9b205a3be33ed83e2605f48c0d6081be174bc79dbab58ba57f85da5fe20ffb8e3f7430f56c29d682b71883da3fc5f5d9b9b2d4cd9b619280097eb875e8a0eaadc9a26e5da3bd54c26e8633428f0f93de7053e71b27236be1fb1493783124a0deebfe7745651d5195268816c526498440a42aea9cf2d70e9a956a26e868bb7b3ca3e03984e60dadc3402b550ed25f70aa3b410b3"})
r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x2, 0x5, 0x2, 0x3ff, 0x0, 0x6, 0x2000, 0xd, 0x8d8, 0x8, 0x1, 0x400, 0x6e, 0x3, 0x7, 0x6, 0x100000001, 0x5, 0x4, 0x7fff, 0xda, 0xac, 0x3, 0x7fff, 0x2, 0xee5, 0x5, 0x4, 0x1f, 0x86e1, 0x3, 0x2, 0x0, 0x57, 0x8, 0x6, 0x0, 0x80000000, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x9, 0x2, 0x3, 0x1, 0x6, 0x4}, r1, 0xf, r0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000700)={0x9b0004, 0x4, 0x6, [], &(0x7f00000006c0)={0x9b0903, 0x0, [], @p_u16=&(0x7f0000000400)=0x4}})
r4 = syz_open_pts(0xffffffffffffffff, 0x204000)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})

06:52:04 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x3, &(0x7f0000000600)=[{&(0x7f00000004c0)="b44db2120046f0d46d1585650fba2062cd1a93e632c27d9134de2a86d60d13759899222f16b3f49ca713bfb7cb1268253b012448617a13", 0x37, 0x960}, {&(0x7f0000000500)="46dbb5f7c403bbb06edbd2be65832cba3d2c28135aa6bf9b9be7d3257a1c1e8650b9dd14a5763676c36ae8ef0c736ac27c4ac79baa88ed23ecbd572f674bdc01aaa195330adca574e843a0642f6db6ba40a34ca380b53c40b6117933c5d126e301431bb4052206d04f47c5bad3ec53fc8f77aa4502f047d79ead070d79c591a47564e7a8fe37af57c5d484fe73df57862bd5bd046055defc7668cab5730562ae94330b919d9a9619a7ab1fbed3f70efe3578c42ad7d2405eaccd40c5e6debb", 0xbf, 0x8000}, {&(0x7f00000005c0)="a79255ea33cbf081aee0fe8e1a3dde9acd0564f128b9f55b6d5b99eb99cb00c91b", 0x21, 0x9}], 0x2000002, &(0x7f0000000680)={[{@utf8='utf8=1'}], [{@dont_appraise='dont_appraise'}]})
sendmsg(r0, &(0x7f0000000400)={0x0, 0xe4, &(0x7f0000000380)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000080)="72f93db825ec077798a589fd46777bdfba80e4e60aab0446db96f5df73dcfd77422c2bff97e3497191125ef4e9f0450ee2a578a50839073a8892bd47bed5ff5baaa0e8292b80a45951219f88bb14c6f5dbd5731c148d722871188418696730a233bcaa954dcd265ebe23648f9a4bc46a", 0x70}, {&(0x7f0000000100)="a1257ffb5d9963fad1be986d31eeb04947b663c1dbe985e4f7f153b435588c7278d1feb4765721559de5579ecabdc38e9c71bf6b362c076fa234a60633a4466b46f34af9934c7b19f7eec65fefde8c19ffd4f9a040060566098338e668515e1cf7b0", 0x62}, {&(0x7f0000000180)="1d975bb837a91d52ab1f5460f0b16c155cd9fea1ff553f39865ccbf772edeb6c8258f82de83ea55a3ad82e23a33b764e7c22ffa1103c833fe2bb7bd0494a1148d80ba13ae01eb47840eb1aefe1716b8bfdc56becf5d5e4ae358500cf60", 0x5d}, {&(0x7f0000000200)="e7faed98b20e48", 0x7}, {&(0x7f0000000240)="e3e04e3a311c28332684ce77612c3c64f9994842456e1c79effe478a2d6f288d60177703ec05b4a97a47ef4515033c4b451e61300320ace8bb83a334bdbeb6c7ae813869c410c26e7d6bb7b6ce92dda8fa625deaca9365994abc8851e9e560d03e6f1c4f382c7dd7dd6f6e0ad351ce3044d74f0528849aa7140c006a962c113e3206307723a066841f6408", 0x8b}, {&(0x7f0000000300)="29beac4bd2", 0x5}, {&(0x7f0000000340)="b8a3a5c6f375c632607f3cff", 0xc}], 0x8}, 0x0)

[ 1991.752461][T25305] 9pnet: Insufficient options for proto=fd
[ 1991.857210][T25311] binder_alloc: 25309: binder_alloc_buf, no vma
[ 1991.911618][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1991.961692][T25313] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value
[ 1992.063286][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1992.085903][T25318] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value
06:52:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0x2})

06:52:07 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x804)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000218, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="086310400200000000000000000000000000000012634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730b1100000200000000000000000000000000000085616466000000000600000000000000010000000000000028000000000000008561646600000000080000000000000001000000000000003900000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="001000000000000006630440020000000463044001000000086310400000000000000000000000000000000001634040030000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="85616466000000000200000000000000020000000000000012000000000000008561646600000000040000000000000000000000000000003f00000000000000852a6277001000000100"/88], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00']], 0xa4, 0x0, &(0x7f0000000580)="1e7fcc4165649e9e434af2e2bc478453a9b205a3be33ed83e2605f48c0d6081be174bc79dbab58ba57f85da5fe20ffb8e3f7430f56c29d682b71883da3fc5f5d9b9b2d4cd9b619280097eb875e8a0eaadc9a26e5da3bd54c26e8633428f0f93de7053e71b27236be1fb1493783124a0deebfe7745651d5195268816c526498440a42aea9cf2d70e9a956a26e868bb7b3ca3e03984e60dadc3402b550ed25f70aa3b410b3"})
r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x2, 0x5, 0x2, 0x3ff, 0x0, 0x6, 0x2000, 0xd, 0x8d8, 0x8, 0x1, 0x400, 0x6e, 0x3, 0x7, 0x6, 0x100000001, 0x5, 0x4, 0x7fff, 0xda, 0xac, 0x3, 0x7fff, 0x2, 0xee5, 0x5, 0x4, 0x1f, 0x86e1, 0x3, 0x2, 0x0, 0x57, 0x8, 0x6, 0x0, 0x80000000, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x9, 0x2, 0x3, 0x1, 0x6, 0x4}, r1, 0xf, r0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000700)={0x9b0004, 0x4, 0x6, [], &(0x7f00000006c0)={0x9b0903, 0x0, [], @p_u16=&(0x7f0000000400)=0x4}})
r4 = syz_open_pts(0xffffffffffffffff, 0x204000)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})

06:52:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:07 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000}})

06:52:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_TSC(0x1a, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5437, 0x0)

06:52:07 executing program 1:
r0 = socket$kcm(0x10, 0x200000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000002780)=""/101, 0x65}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000001780)=""/4096, 0x1369}, {&(0x7f0000001300)=""/136, 0x5f}, {&(0x7f00000013c0)=""/58, 0x3a}, {&(0x7f0000001400)=""/233, 0x27}, {&(0x7f0000001500)=""/252, 0xfc}], 0x8, 0x0, 0xff0f}, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x4000, 0x0)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/168)

[ 1994.305792][T25329] binder_alloc: 25322: binder_alloc_buf, no vma
[ 1994.332960][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1994.338841][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:52:07 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x6, 0x2)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$x25(r0, &(0x7f0000000240)={0x9, @null='               \x00'}, 0x12)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000300)={0x0, 0x5, 0xa, 0xffffffffffffff4b, 0x356, 0x7})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="0105028fb9c91c124b330a858bd58c545b7444e42c0af060ce05bb4e149e62656ac6c99711dfd58910f43f0e9d68eceb2e0d709880dcf20a4050130960d2da7947a6d99268aee6d8df1ada8f9481cdd90158bf9337bc97f393ed8dfbd0", &(0x7f0000000280)=""/114}, 0x97)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002a000500d25a80648c000000070000001000084002376ee6735e000000053582c137153e370900018000", 0x2e}], 0x1}, 0x0)

06:52:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x2})

06:52:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xff00000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:07 executing program 1:
r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00')
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0xffffffffffffffd1, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="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", 0x218, 0x8000, 0x0, 0x0)
close(r1)

06:52:07 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x52, r1, 0xffffffffffffffff)
clone(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)

[ 1994.622156][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1994.669157][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
06:52:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x2})

06:52:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@fragment, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={<r1=>0x0, 0xdf, "8d41a8fb69a96ecaa51ae4483b4c73da397ad2ee20816ac6e6f360892f62a639d50dc9f415978e5003b1182b2a8ea33977abe31f6b032c9a8d971c74f0830d939b91cc734a60c1222a267884e49418f2f20a503d580ecfa54f7dcbf0a6831d804bc5e132f73496d6db8dab071a3bc99fda359db4f3c7319b6d926e089213c1d31744791539f7a5df5f0db1dfd06fafcc54395afb8350f6defd571f43ee61954a7685a19aaca355994e5eb4a2ef3fef2359ff182b232c52b6390749102426c5139c64a9fb1905be98077c9c725b513c0be07a165e76bb2e7b90db57907d0810"}, &(0x7f0000000140)=0xe7)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x9}, 0x8)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

06:52:10 executing program 1:
mknod(&(0x7f0000000080)='./bus\x00', 0x102c, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5a, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000180)={{0x29c, 0xcabc, 0x1, 0x1efd, 0x3, 0x6}, 0x7732, 0xeef, 0x0, 0xfff, 0x80, "23e8028d0beffd42135d3661f59c0747414a31fe9c7009bd2dc054d635b68d554e7bb7d4a4941c39fc67a54f4782ae7f461576d22f229d738c4c7c7a143c915fbe76904da7fa21f385c58083797521787a2fc9c7beac208c59beb91aef2cfddabd720dc91ab988b00e145bbeb3a4ffc45f007fbbd8d1cb4f5541fb18be6bc9a4"})
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='^posix_acl_accessppp1\\\x00', 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={<r3=>0x0, 0x56, "017668c2a10e7c977137485532eaf7f1410ea94d93dc53fc908fa09baf74c9f81c15702626899f209b7508c8f94be66a220584050bdb7a2cfae6ae7cc585ade0a1b02fd5dcad6dcc4a44d2519e2f9ad1643ec91bac09"}, &(0x7f00000000c0)=0x5e)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r4, 0x404, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4854}, 0x20000000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x5}, 0x8)
write$P9_RWALK(r1, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC=r2], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES64=r0], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="369b62a2253c7e34ed3cac134f3cd2177474c0283c62", @ANYRES64=r3, @ANYRES64=r0], @ANYRES16=r3, @ANYRESOCT=0x0], 0x3d)
splice(r1, 0x0, r2, &(0x7f0000000100), 0x20, 0x0)

06:52:10 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2010}})

06:52:10 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x2})

06:52:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x2})

06:52:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
close(r1)
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="b7c720c297da887f0d8c350b64d48ed673e42147c5c2b437788b4d9a48182de80afb107bf32c9e09bc068e281c33e1b59889ac07259a7a9563b79c0c81907e218dca89b439a9f7d18780dfd70b3bdcfa4c28f2d5ff35054a74170d273db1d195b7f53ffe99849dac99622aa9e16d42af9a2d396113912cdab38a55bffb5caf95a29b27796b055e4b72bd0ced6157431c5e9f7f55659d7705dc7918d81242312a275473ac65ad3ea6bff55d4044b2facb8c6dce45896e61f7e6b171645250abde45e8f2e2acb09253ec803bd6012d3b61c513384e4244fa92a4926d70b125573e33bb", 0xe2}, {&(0x7f00000000c0)="acbc1bb551c861e658f5345d1c5d6d0edf1bdfe8771f49d866d61114ae39254e543529", 0x23}, {&(0x7f0000000280)="c14a0251b8ecad8b48797f9442e2bde49aa344eb70957fa6c78c01cef80d31efdd2e25b5f4ca346e40433b0b7a59", 0x2e}, {&(0x7f00000002c0)="09c32b6e04b669a54031b0b031c65ac24800c56b5e3aded9f00cc16b4648a81c3a5fe3b487c8e46f1686d82e4b97388daf4963a9be305c60ada5fe90dd8c1d68ee8fbf8a117054376a9f36b7b66b35af878f942ba49f002cdc2053e2c4a3790147ad24", 0x63}, {&(0x7f0000000340)="cb8539129e02c6863cb56d179a67f395a0514fef541b0ce953510dd2d4acd524b9a0c54395918dec92dde6ea178993b089dd877072414c7e23df751fc77bdf9bbdfdf57bd11e69818df23612a87a1cb97a82752856cf7a6acfcb15d592db978ec3c511c99794fa4b540732159e436c8624a1637056be73233bb1af18eb10f4aa602fa75caf5db7355999cbbaee07d6082d4bbcae6b3a564c13c3cd56a657253d5ca0df5d9ed5b90123e0653e2a6cdadfc0eb88cc905f0d8fd293f855e2", 0xbd}, {&(0x7f0000000400)}, {&(0x7f0000000440)="798bcef77c530df1c8355798a810aa32cabe50b9983180a5dc316ea4cfac508d4caebb966bb4399bcf445714bd787ad1e535996f5378b74005b021f52d533ad6d4f1db63a37b853d24a8714eed93caba3f5c131ad4ad7a673fac525d33933ad5ec9cee7d379235bf4f826fd90f85cd31f21d491ce2ab8e3a9680ba25ba2af5e2e5bbe4ff596c8436b93c251a5ff0229b6c81ad988159a035673ccfcf9065df30b3ce16c5d7ab147e0fa11f4866d44d3473c07e", 0xb3}], 0x7, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x8000, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x52d, 0x10000000000000, 0x3, 0x1d, 0xf, 0x4, 0x5, 0x8, 0x3, 0x1ff})
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x10002, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000580)=0x6)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000032000/0x18000)=nil, 0x0, 0x203, 0x0, 0x0, 0x27d)

06:52:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f', 0x2})

06:52:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000000016)

06:52:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:13 executing program 1:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x40000000000000, 0x101000)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000400)={"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"})
r1 = fsopen(&(0x7f00000003c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x2)

06:52:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12', 0x2})

06:52:13 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x4000}})

06:52:13 executing program 4:
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x7f, 0x4, 0x7fff, 0x7fffffff}, {0xedc, 0x58ba2395, 0x2000000000005, 0x6476}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0xfd79}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x510, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x5, 0xfffffffffffffc01, 0x0, 0x100000000}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x10040, 0x123)
close(r3)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000200)={0x4})

06:52:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r1 = gettid()
sched_setscheduler(r1, 0x3, &(0x7f00000001c0)=0x9)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="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", 0xfc)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000002c0)={0x2, 0x0, [], {0x0, @bt={0xff, 0x8, 0x0, 0x3, 0x8, 0x8, 0x100, 0x4, 0x1, 0x3ff, 0x5, 0xffffffff, 0x49, 0x4, 0x2, 0x20}}})
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$P9_RCLUNK(r5, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x1f, 0x2, 0x12, &(0x7f0000ffd000/0x1000)=nil, 0xff})
openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
getgid()

06:52:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9c, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000280)={0x32, {{0xa, 0x4e24, 0x0, @loopback, 0x800}}}, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x2)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4003ff)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4006, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xe, {0x8, 0x2, 0x8000, 0x990}})
sendfile(r3, r3, 0x0, 0x8800000)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r4=>0x0})
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0xb3, 0x7, 0x0, 0x7, 0x5, r4})

06:52:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H', 0x2})

[ 2000.632776][T25416] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2000.691580][   T26] audit: type=1800 audit(1560235933.788:185): pid=25420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16977 res=0
06:52:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

[ 2000.815289][T25425] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
06:52:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J', 0x2})

[ 2001.106243][   T26] audit: type=1800 audit(1560235934.208:186): pid=25426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16977 res=0
06:52:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000000016)

06:52:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = epoll_create1(0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = epoll_create1(0x0)
flock(r3, 0x2)
flock(r1, 0x1)
msync(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x4)
dup2(r2, r1)
fcntl$getflags(r3, 0x1)
flock(r3, 0x1)

06:52:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x2})

06:52:14 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x4004}})

06:52:14 executing program 4:
listen(0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0x6f}, 0x3f00)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300))
close(r1)
socket$kcm(0x29, 0x0, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x82010, r2, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x4044000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1}, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000380)={0x31, 0x4, 0x0, {0x5, 0x400, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000014})
epoll_wait(r3, &(0x7f000000cff0)=[{}], 0x1, 0xfffffffffffffff7)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000007ffc), 0x4)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000340)={0xffffffffffffffd9})
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

06:52:14 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x59db, 0x3fffff)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x9, [], 0x0, r0, 0x100000000001, 0x4}, 0x3c)

06:52:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x2})

06:52:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x10d}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h', 0x2})

06:52:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare(0x24020400)
getdents(r1, 0x0, 0x0)

06:52:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x300}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000000016)

06:52:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l', 0x2})

06:52:15 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
getpeername$tipc(r0, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
setrlimit(0x0, &(0x7f00000000c0)={0x20000001, 0x40})
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in={0x2, 0x4e21, @multicast1}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e21, @remote}], 0x10)

06:52:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x500}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:15 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4200, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x800, 0x200)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
dup(0xffffffffffffffff)
mknod(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x20, 0x0)
statfs(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)=""/5)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1170484000000000000000000000000000004782d88f27e2f6400d10decb"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x62, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e7400000000d2fd755ae9ed3e70f216a824df6c55ebf3a065d17a65"], 0x0, 0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x41, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "b7f564938c472c80317907f6bd9d6d2d1e97047ee16b5e59cf36261a4f46af68", 0x0, 0x1})
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00')

06:52:15 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x488e}})

06:52:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x600}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x4c1, r1)
keyctl$read(0xb, r2, &(0x7f0000003f00)=""/4096, 0xffffff2b)
add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="3a068415f7bd169b86f26a3d6b99b59cd1139c6f686e21e277082d07edfe83225c738d6545fbed4e87f96af1882599e8d311a2a450fc0beb987332ed99c37d9b3103f9d134f90cf848531c26904592dc48d285df2c86a57b1ce003c296c06913bb16fb9228e5e50a0efed56ba4d5a7091d531f28d71114f01a46c8e6f104d8b08119e48291315a6ddc2edd650a7b0ddb1554a0f7636bdad4cfd0b8f64058bbdc01722c0845f4", 0xa6, r0)

06:52:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t', 0x2})

[ 2002.467274][T25494] binder: 25490:25494 unknown command 1078489105
[ 2002.476064][T25494] binder: 25490:25494 ioctl c0306201 20000100 returned -22
06:52:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000000000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x186, 0x80d], [0xc1]})

06:52:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x700}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z', 0x2})

[ 2002.761545][T25511] kvm [25509]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x80d
06:52:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008910, &(0x7f0000000100)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x3, 0x0)
close(r0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/hci\x00')
write$P9_RRENAME(r4, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7)
close(r3)
close(r2)
pipe(&(0x7f00000000c0))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r5)
close(r6)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
splice(r1, 0x0, r6, 0x0, 0xc0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
clock_settime(0x6, &(0x7f0000000080)={r7, r8+30000000})
close(r6)
write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="c5b4e93f79d1b4ba4102ad9d03cb303d033cfd2fa2fdb160b6e01b4582d6c526e9ab6d91628fecb73d02fa357aa6d5175ec7315ca41710fbeda773b66411421574c46905839927ad1a0272"], 0x1)

06:52:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xd01}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2', 0x2})

06:52:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x0)

[ 2003.247669][T25494] binder: BINDER_SET_CONTEXT_MGR already set
[ 2003.253876][T25494] binder: 25490:25494 ioctl 40046207 0 returned -16
[ 2003.263103][T25494] binder: 25490:25494 unknown command 1078489105
[ 2003.269536][T25494] binder: 25490:25494 ioctl c0306201 20000100 returned -22
06:52:16 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4200, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x800, 0x200)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
dup(0xffffffffffffffff)
mknod(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x20, 0x0)
statfs(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)=""/5)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1170484000000000000000000000000000004782d88f27e2f6400d10decb"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x62, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e7400000000d2fd755ae9ed3e70f216a824df6c55ebf3a065d17a65"], 0x0, 0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x41, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "b7f564938c472c80317907f6bd9d6d2d1e97047ee16b5e59cf36261a4f46af68", 0x0, 0x1})
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00')

06:52:16 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8e48}})

06:52:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x2000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg(r1, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1}}], 0x1, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x4f})
listen(r1, 0x7)
accept4(r1, &(0x7f00000000c0)=@caif=@util, 0x0, 0x0)

06:52:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0x2})

[ 2003.562669][T25539] binder: 25534:25539 unknown command 1078489105
[ 2003.569338][T25539] binder: 25534:25539 ioctl c0306201 20000100 returned -22
06:52:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x7, &(0x7f00000000c0)="c0dcb7055e0bcfec7be070bfce83f5bb83e76257951d83b364eff75e8b28b99e0301248061b7869594394c4a74cdbcfc0dcdda2f20149e2d093c9a640a8de9f56dbf207ea8834a352da04ce23befc993c65b1edc79318d8b7117ad0c8f7afd8054a1f279186befef50b8a74dc27d82489ae60a6753d6731653ae4d1bfdfb8645d01825106d97c7b46857ef60b961dcb85ee1eec5dad9fcd938db89d5511eaa22810f67020e6376c021d04e4c5bafc774b8c8e0")
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$getown(r0, 0x9)
getpgid(r2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000001480))
futex(&(0x7f0000001ac0), 0x3, 0x0, 0x0, &(0x7f0000001c40), 0x0)

06:52:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H', 0x2})

06:52:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x3f00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0)
r0 = gettid()
syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x89e, 0x801)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x14)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x4000)
write$9p(r1, &(0x7f00000000c0)="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", 0x1000)

06:52:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x4000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x0)

06:52:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x38a5, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[0x0], 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x32e})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x1, 0x8)

06:52:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xff00}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P', 0x2})

06:52:17 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xedc0}})

06:52:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x40000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:17 executing program 4:
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffb, 0x8)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xffffffff7fffffff, 0x8000)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000180)=0x4)
setsockopt$inet_int(r1, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c)

06:52:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8', 0x2})

06:52:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:17 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000000)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

06:52:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
mount$9p_virtio(&(0x7f0000000040)=')vboxnet0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x80000, &(0x7f0000000200)={'trans=virtio,', {[{@privport='privport'}, {@cache_none='cache=none'}, {@cachetag={'cachetag', 0x3d, 'posix_acl_accesscpuset'}}], [{@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@fsname={'fsname', 0x3d, 'cubic\x00'}}, {@fsname={'fsname', 0x3d, 'cubic\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{em0user/:&'}}]}})

06:52:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x0)

06:52:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000002a7b00000000000000000000000000000000000000ffffffff0000000000050000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000e9ff000000ffffff7f000000000200000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f00000000000000c64edcd8a9d7985f0000000000000000000000100000faf2ffffff00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000bc00000041554449540000000000000000000000000000000000000000000000000000000800000000000d00000000000000000047665087c0495527c6adf26f73c14b1a74af4e856d883c5ca8af600048404b3c973f692b561ac32fcfd9d729dc19da0aa492bd8912b3eb3b407d416922ccc7a3c72101ac307f440a45736722b9908f4d1fa7e2027bdf2e9500a424d83e3f1fb7bb337c8e59801058717410cec626159d7062a7b7d604d616b3dac9000ab70d"]}, 0x216)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x40)
ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000002c0)={0x153, 0x6, 0x0, [{0x1, 0x7ff, 0x9, 0x81, 0xfffffffffffff001, 0x4, 0xa0}, {0x6, 0x4, 0x4, 0x6, 0x40, 0x4a6, 0xcd}, {0x80000000, 0x8, 0xde42, 0x2, 0x1, 0xfffffffffffffffd, 0x5}, {0x6, 0xe86, 0x800, 0x800, 0xffffffff, 0xc85, 0x100000000}, {0x9, 0x81, 0xfffffffffffffffd, 0x100, 0x0, 0x7, 0x3}, {0x1, 0x7, 0x8, 0x5, 0xa6, 0x1, 0x8}]})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', r3})

06:52:18 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

06:52:18 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xff00}})

06:52:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:18 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x20000000000089fa, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5)

06:52:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xf0ffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:18 executing program 4:
keyctl$set_reqkey_keyring(0xe, 0x4)
keyctl$join(0x1, 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='user\x00', 0x0)
syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x4f, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x6a}], 0x2000c1, &(0x7f0000001180)='user\x00')
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/mixer\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001200)={0x59, 0x6, 0x0, {0x3, 0x6, 0x30, 0x0, '@trusted*em0ppp0md5sumself\\)selinux$system*]user'}}, 0x59)

06:52:18 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x81, 0x2000)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @rand_addr=0x80000000}, 0x5}}, 0x6, 0x721, 0x5, 0x8, 0x7fffffff}, &(0x7f0000000140)=0x98)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x7f}, 0x8)
bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x4}}, 0x10)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0)
ioctl$TCSBRK(r2, 0x5409, 0x2)

06:52:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x67200000000000, 0x4000)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
syz_open_dev$media(0x0, 0x0, 0xa00)
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48)
close(r1)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

06:52:19 executing program 1:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
flistxattr(r0, &(0x7f0000000100)=""/58, 0x3a)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x490003, 0x0)

06:52:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x10d0000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:19 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1000000}})

06:52:19 executing program 0 (fault-call:4 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:19 executing program 1:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='em1vmnet0user\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0, 0xffffffff00000f65}, 0x28)

06:52:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x67200000000000, 0x4000)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
syz_open_dev$media(0x0, 0x0, 0xa00)
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48)
close(r1)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

06:52:19 executing program 1:
setreuid(0x0, 0xee00)
r0 = io_uring_setup(0xade, &(0x7f0000000040))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400080, 0x0)
close(r0)

06:52:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x8b)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0x7c}}, 0xa)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:52:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)', 0x2})

06:52:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x3000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x800, &(0x7f0000000100)="dc7ca50500000000000000")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'lapb0\x00', 0x601})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="6ac169a8bb248adc9da3f6eae59db1ef1b7d7314e65bd52058e53f03e3a7613d80d4634cd1975b2048689ed1c4901fcc207f7f9550d2d839931a6adb5b6205a97ca891917dab725bd9b9a30076e0d362dcb055c38cfa5d8e34e4e71051ab68ee8ae05a90e9f570642efed2fd5c50a756511089de3734a39680c569a4056a63222cd0459e15a08d02af97c2ffbc5e73c6f1cf23edb52fb2059fac4ed72bc38a8b43b42f40991320cd47330ad556d01d52b58ee8c11ac77ee10a6d23bf0022a978", 0xc0)
close(r1)
dup3(r1, r1, 0x80000)

06:52:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:20 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000000}})

[ 2009.305647][T25673] FAULT_INJECTION: forcing a failure.
[ 2009.305647][T25673] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2009.319393][T25673] CPU: 0 PID: 25673 Comm: syz-executor.0 Not tainted 5.2.0-rc3-next-20190607 #11
[ 2009.328502][T25673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2009.338566][T25673] Call Trace:
[ 2009.341870][T25673]  dump_stack+0x172/0x1f0
[ 2009.346217][T25673]  should_fail.cold+0xa/0x15
[ 2009.351078][T25673]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2009.356884][T25673]  ? is_bpf_text_address+0xac/0x170
[ 2009.362093][T25673]  should_fail_alloc_page+0x50/0x60
[ 2009.367298][T25673]  __alloc_pages_nodemask+0x1a1/0x8d0
[ 2009.372675][T25673]  ? __unlock_page_memcg+0x53/0x100
[ 2009.377888][T25673]  ? __alloc_pages_slowpath+0x2900/0x2900
[ 2009.383806][T25673]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2009.390050][T25673]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2009.396295][T25673]  alloc_pages_current+0x107/0x210
[ 2009.401415][T25673]  __get_free_pages+0xc/0x40
[ 2009.406013][T25673]  __tlb_remove_page_size+0x288/0x4a0
[ 2009.411824][T25673]  unmap_page_range+0xeaa/0x22f0
[ 2009.416786][T25673]  ? vm_normal_page_pmd+0x400/0x400
[ 2009.421992][T25673]  ? __kasan_slab_free+0x102/0x150
[ 2009.427106][T25673]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2009.433348][T25673]  ? uprobe_munmap+0xad/0x2b0
[ 2009.438110][T25673]  ? mmput+0x3e8/0x4c0
[ 2009.442196][T25673]  unmap_single_vma+0x19d/0x300
[ 2009.447139][T25673]  unmap_vmas+0x135/0x280
[ 2009.451775][T25673]  ? zap_vma_ptes+0x110/0x110
[ 2009.456458][T25673]  ? kasan_check_write+0x14/0x20
[ 2009.461399][T25673]  exit_mmap+0x2ad/0x510
[ 2009.465648][T25673]  ? __ia32_sys_munmap+0x80/0x80
[ 2009.470610][T25673]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2009.476850][T25673]  ? __khugepaged_exit+0xcf/0x400
[ 2009.481879][T25673]  mmput+0x15f/0x4c0
[ 2009.485779][T25673]  do_exit+0x816/0x2fa0
[ 2009.490016][T25673]  ? find_held_lock+0x35/0x130
[ 2009.494783][T25673]  ? cgroup_leave_frozen+0x2fe/0x480
[ 2009.500333][T25673]  ? mm_update_next_owner+0x640/0x640
[ 2009.505717][T25673]  ? lock_downgrade+0x920/0x920
[ 2009.510565][T25673]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2009.516041][T25673]  ? cgroup_leave_frozen+0x2fe/0x480
[ 2009.521590][T25673]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2009.526806][T25673]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 2009.532093][T25673]  ? trace_hardirqs_on+0x67/0x220
[ 2009.537290][T25673]  ? kasan_check_read+0x11/0x20
[ 2009.542145][T25673]  do_group_exit+0x135/0x360
[ 2009.546742][T25673]  get_signal+0x463/0x2490
[ 2009.551227][T25673]  do_signal+0x87/0x1990
[ 2009.555478][T25673]  ? wait_for_completion+0x440/0x440
[ 2009.560856][T25673]  ? setup_sigcontext+0x7d0/0x7d0
[ 2009.566141][T25673]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2009.572825][T25673]  ? fput_many+0x12c/0x1a0
[ 2009.577242][T25673]  ? fput+0x1b/0x20
[ 2009.581590][T25673]  ? do_readv+0x225/0x330
[ 2009.585918][T25673]  ? ksys_write+0x1cf/0x290
[ 2009.590419][T25673]  ? exit_to_usermode_loop+0x43/0x2c0
[ 2009.595789][T25673]  ? do_syscall_64+0x58e/0x680
[ 2009.600719][T25673]  ? exit_to_usermode_loop+0x43/0x2c0
[ 2009.606091][T25673]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 2009.611380][T25673]  ? trace_hardirqs_on+0x67/0x220
[ 2009.616412][T25673]  exit_to_usermode_loop+0x244/0x2c0
[ 2009.621700][T25673]  do_syscall_64+0x58e/0x680
[ 2009.626297][T25673]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2009.632189][T25673] RIP: 0033:0x459279
[ 2009.636194][T25673] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
06:52:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:22 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
fsopen(&(0x7f0000000100)='jffs2\x00', 0x1)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000000c0)={0x10001, 0xffff})
preadv(r0, &(0x7f00000017c0), 0x10000000000002cf, 0x0)

06:52:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x5000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:22 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000500)={"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"})
r1 = getpgid(0x0)
sched_setattr(r1, &(0x7f0000000200)={0x30, 0x3, 0x1, 0x7ff, 0x7, 0x2, 0xfffffffffffffc00, 0x5}, 0x0)
write$P9_RLERRORu(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x0, @local, 'dummy0\x00'}})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[0x0, 0x4c48], 0x0, 0x400, 0x2})
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
r4 = request_key(&(0x7f0000000440)='dns_resolver\x00J\xea\xab\x8bH\x17*H\f?A\x84\xa2\x02\\\xfa\x9c\xd9\f!/7\x99\xaa\x95Ca?yyy\xf7\xca\fI\xa8\x92\xd1\xd0\xe1\xed\n\x86n\"\xd02\xf4\\\xab\xa3\x03\xc2\xcc\x05ZK#1\xe9]8\x13l\xca\x849\x82?\xc9]v\xf1/\xeb\xd4\x1aM3\x17\x84jC6\x9d\x90\xa4\xa2\x87\xe0s\\\xb2\xcd\xa5\xc0\xfb\xa12\xce\xd2\xbe\x9e,\x9f5Y\xb3\xff\xa6\xde\x9dH\xba\x97\\z5I\x9c\x9e)l(\xe1\x81\x97:\xaf\xb9\x8e2;l\xcf\xc5b\xf6\\\xfc\x03y\x8dW\xedJ\xe1\xeb\xbc\x1f\x81:L|\xedm\x00wa\x11<$\xa0\n\xdf^\xccr.\np\x9d9M', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000240)='p\xf0p0%security.trustedselfppp1eth0(em0-lo\x00', r3)
mbind(&(0x7f0000004000/0x8000)=nil, 0x8000, 0x1, &(0x7f0000000100)=0x135, 0x80, 0x4)
openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x1, 0x0)
request_key(0x0, 0x0, 0x0, r4)
syz_genetlink_get_family_id$ipvs(0x0)
r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, 0x0, 0x352)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)

06:52:22 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000002}})

[ 2009.655886][T25673] RSP: 002b:00007ff102f03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2009.664386][T25673] RAX: fffffffffffffe00 RBX: 00007ff102f03c90 RCX: 0000000000459279
[ 2009.672364][T25673] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004
[ 2009.680356][T25673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 2009.688327][T25673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff102f046d4
[ 2009.696302][T25673] R13: 00000000004c6392 R14: 00000000004db1c0 R15: 0000000000000005
06:52:23 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
syz_open_dev$vivid(0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$usb(0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
clock_gettime(0x0, &(0x7f0000000900))
r2 = accept$alg(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})

06:52:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x6000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x6b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
r1 = dup(r0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005]}, 0x45c)

06:52:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x7000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 2010.250025][T25743] input: syz1 as /devices/virtual/input/input2131
[ 2010.330550][T25743] input: syz1 as /devices/virtual/input/input2132
06:52:25 executing program 0:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='\x00'], &(0x7f00000002c0)=[&(0x7f00000001c0)='/dev/video#\x00', &(0x7f0000000240)='/dev/snd/controlC#\x00', &(0x7f0000000280)='mime_type&{\x00'])
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:25 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$describe(0x1d, r0, 0x0, 0xfffffffffffffe8b)
r1 = dup(0xffffffffffffffff)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460a00ff008100000000000000031d0000060000005d0100000000000040000000000000004801000000000000040000000600380002000900ffff000051e57464c1fe000004000000000000007c0700000000000002002339c664000000000000ff7f000000000000ffff0000fbffffff0000000000000000f2f3984141488c14fe94832a58d23cadce04f8b3ec761680a2f24395cb416c8d82cef21e841f00e30367a09bc3cb3e58e65a1e2cc939c02f087088e0346a7f624e890f068bead1368c10c5be514c54be54247ed23ce08b0eb07c78b0cebe540f6554"], 0xd7)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r2=>0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f00000002c0)=""/65)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0)

06:52:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x8000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:25 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000040)=""/223, 0x2000, 0x800, 0x7}, 0x18)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket(0x40000000012, 0x5, 0x1)
dup2(r1, r2)

06:52:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f', 0x2})

06:52:25 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3000000}})

06:52:26 executing program 4:
r0 = socket$inet(0x2b, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr="9a0bbe395de30ee68c4554b6c251ec9d", @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0xfffffffffffffce8)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r1=>0x0)
sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0)

06:52:26 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6e, 0x2000)
ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000000c0)={"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"})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10)

06:52:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x10000060}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fee0135eaffd1c58bf2fa9e3f2a50a65d099a924ea9c91e56cbb6455f10bc8ab0c66139378ccb158a6a65213f6c4e8ed3e866a7f0f5b995933fa6037ff8f96"}, 0x60)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:52:26 executing program 1:
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getown(r0, 0x9)
close(r0)
socketpair(0x0, 0x0, 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x410980, 0x0)
unshare(0x40000000)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)={0x0, <r2=>0x0, 0x2})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r2})
fcntl$setflags(r0, 0x2, 0x1)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6)

[ 2013.417198][T25788] IPVS: ftp: loaded support on port[0] = 21
[ 2013.939153][T25790] IPVS: ftp: loaded support on port[0] = 21
06:52:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x100000008001)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)
r3 = dup3(r1, r0, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000000c0)={0x8001, 0x4, 0x5})

06:52:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x3f000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fee0135eaffd1c58bf2fa9e3f2a50a65d099a924ea9c91e56cbb6455f10bc8ab0c66139378ccb158a6a65213f6c4e8ed3e866a7f0f5b995933fa6037ff8f96"}, 0x60)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:52:29 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x4000000}})

06:52:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x40000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x60000010}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:29 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "782d240b3b2823cd", "5aedaeba1942a849e4c22c9539108e76", "f2b01b53", "20bfdb922ed2287c"}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x8, 0x3, 0x4, 0x6, 0xfffffffffffffff9, 0x1, 0x78, 0x3ff, 0x2, 0x1}, 0xb)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r3 = dup3(r2, r0, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x20040)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={<r4=>0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x4}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x80000001, 0x7fff, 0x1000, 0x8, 0x10001}, &(0x7f00000002c0)=0x14)

06:52:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2})

06:52:29 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x210000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0x6, 0x3, 0x6}, 0x80000001, 0x1f})
syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0)

06:52:30 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x202100, 0x0)
accept4$packet(r0, 0x0, &(0x7f0000000040), 0x80000)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x4, 0x8855, 0x1ff})
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdnJo', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xc0000000000)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
quotactl(0xf7a2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000003c0)="d1f5cbf26c543e9703c2110a6f745f2d5b09e6faa3219b222532a03c12f8951f760bca38383b2ff59b4c57a776fc93ecafa2b3a1db6e58a2702cbe384c8136d8735ceaef4ac8d4f87a31db1f84ac8a4a29b12cc3763ebc5f462c994e12d82c66c67f07a95e222abdcb780e7206bc2ea41e638bd0a0a56f50464376466c525dd30121310ae0352d7ed236dc4066c2f8748cb9ef8159cc35b79145fabca82c5428cfb6f930662dddaed1cd90d69344e1df025ee3f7e8c6bee525a188297fd3e2ed67aa8dbcbc27ddc76fa1f982d3dba953f2ee3d42cc792beda8d48260e2251f9041acb19f2c9837301bc0eaf47402eb494323007eb4007a")

[ 2017.046971][T25832] 9pnet: Insufficient options for proto=fd
[ 2017.057505][T25833] 9pnet: Insufficient options for proto=fd
06:52:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r2=>0x0)
tkill(r2, 0x41)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
socket$kcm(0x29, 0x7, 0x0)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x800)
ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffff9})
r4 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x1000000000016)

06:52:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:32 executing program 4:
getsockname$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @default, @rose, @remote, @netrom, @remote, @default, @rose]}, &(0x7f00000000c0)=0x48)
r0 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000000000/0x200000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="d5000000750100ca000000b986c7f8838755e54de25f5f699466ed7355f7011100ed4974a2a1db89d84cee537636350f119e4a740c7405bc69dff5dee217915efa097114db696491dde9fc7d69d074451ec542b7f9d043ecd2167c83255aa1022cdb313f89bb4ca85e21e769c82abeb10d1acf4a18db1b524d34d52f62095302686b08613eaedc230414d10c5cf73366d879ee2f11fb4c2f7e950d481c1c685f8589ee338113123ff51897c3de9da2d180bef819891cbd04991b7c78dcc4935630bc2f127d3ec94a4fa425e201013a7c880e5841ed5f6f9b8897d216b675af4a204b9ac9"], 0xd5)

06:52:32 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x4400000}})

06:52:32 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10000, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x10001, "c57ba7efac58d466f64e3af4891b016414698dd6ffa69c6a812efe6db9624487", 0x1, 0x1})
listen(r0, 0x5eb857)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x521000, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000080)={{0x1, @name="517f32a72b8aad2606df165ea7bf62909659b6f6a929f17a77519b01adb493f2"}, 0x8, 0x9, 0x10001})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0)

06:52:32 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x8001, {{0x2, 0x4e23}}}, 0x88)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40001800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)

06:52:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xff000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:32 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r0)
fcntl$dupfd(r2, 0x0, r1)
recvfrom$inet(r1, 0x0, 0x0, 0xc2, 0x0, 0x800e005c0)

06:52:32 executing program 1:
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000080)=0x8ddcaa84f9e65522)

06:52:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x2000000000000}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2})

06:52:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x624, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = dup(r1)
write$evdev(r2, &(0x7f0000000240)=[{}], 0x18)
sendfile(r0, r1, 0x0, 0x20000102000007)

06:52:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
unshare(0x40000000)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28)

06:52:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:35 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x5000000}})

[ 2022.288506][T25883] IPVS: ftp: loaded support on port[0] = 21
06:52:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

[ 2022.500087][T25892] IPVS: ftp: loaded support on port[0] = 21
06:52:35 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}})

06:52:35 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

06:52:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_procfs(0x0, &(0x7f0000001100)='net/rpc\x00')

06:52:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @broadcast, <r3=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', r3})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x1000000000016)

06:52:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
pselect6(0xc2, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x30)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x54})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

06:52:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x16})

06:52:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:38 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6000000}})

06:52:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='sched\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

06:52:38 executing program 4:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200))

06:52:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x20000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:38 executing program 1:
getgroups(0x2, &(0x7f00000006c0)=[0xee01, <r0=>0xffffffffffffffff])
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0x0, r0}})

06:52:38 executing program 4:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070")
r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1)
r3 = dup2(r2, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write(0xffffffffffffffff, &(0x7f0000000080)="2700000014000707030e0000120f", 0xe)
write$sndseq(r0, &(0x7f0000000000), 0xffd7)

06:52:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
socket$tipc(0x1e, 0x2, 0x0)
eventfd2(0x81, 0x800)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=<r3=>0x0)
timer_settime(r3, 0x4, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff53)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0076f)

06:52:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@sbsector={'sbsector'}}]})

06:52:41 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7000000}})

06:52:41 executing program 4:
unshare(0x400)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
finit_module(r0, 0x0, 0x0)

06:52:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x87', 0x2})

06:52:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xf0ffff00000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:41 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0xc2, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x30)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x54})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

06:52:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x2})

06:52:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfec7be070")
r1 = semget$private(0x0, 0x7, 0x108)
semctl$SEM_STAT(r1, 0x0, 0x12, 0x0)

06:52:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070")
r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x100000008001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff053, 0x200000)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8000, 0x1ff, 0xfffffffffffffff9, 0x2f08, 0x1f, 0x0, 0x7}, 0x1c)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

06:52:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0)

06:52:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070")
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0)

06:52:44 executing program 5:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
close(r1)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8000000}})

06:52:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00', 0x2})

06:52:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff', 0x2})

06:52:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x300000000000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000})

06:52:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffdc9, &(0x7f00000002c0)={0x0, 0x99}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bcsh0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0x2})

[ 2032.336521][T25995] ==================================================================
[ 2032.345132][T25995] BUG: KASAN: use-after-free in css_task_iter_advance+0x49b/0x540
[ 2032.352937][T25995] Read of size 4 at addr ffff88808629f8dc by task syz-executor.4/25995
[ 2032.361146][T25995] 
[ 2032.363463][T25995] CPU: 1 PID: 25995 Comm: syz-executor.4 Not tainted 5.2.0-rc3-next-20190607 #11
[ 2032.372546][T25995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2032.382599][T25995] Call Trace:
[ 2032.385874][T25995]  dump_stack+0x172/0x1f0
[ 2032.390193][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2032.395637][T25995]  print_address_description.cold+0xd4/0x306
[ 2032.401599][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2032.407039][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2032.412482][T25995]  __kasan_report.cold+0x1b/0x36
[ 2032.417400][T25995]  ? __sanitizer_cov_trace_cmp8+0x20/0x20
[ 2032.423099][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2032.428544][T25995]  kasan_report+0x12/0x20
[ 2032.432859][T25995]  __asan_report_load4_noabort+0x14/0x20
[ 2032.438476][T25995]  css_task_iter_advance+0x49b/0x540
[ 2032.443747][T25995]  css_task_iter_start+0x18b/0x230
[ 2032.448842][T25995]  ? oom_badness+0x6c0/0x6c0
[ 2032.453416][T25995]  mem_cgroup_scan_tasks+0xaf/0x180
[ 2032.458601][T25995]  ? mem_cgroup_iter_break+0x30/0x30
[ 2032.463878][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2032.470097][T25995]  ? task_will_free_mem+0x139/0x6e0
[ 2032.475273][T25995]  ? rcu_read_unlock+0x16/0x60
[ 2032.480022][T25995]  out_of_memory+0x6b2/0x1280
[ 2032.484683][T25995]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 2032.490474][T25995]  ? oom_killer_disable+0x280/0x280
[ 2032.495659][T25995]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 2032.501454][T25995]  mem_cgroup_out_of_memory+0x1ca/0x230
[ 2032.506986][T25995]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 2032.512605][T25995]  ? do_raw_spin_unlock+0x57/0x270
[ 2032.517700][T25995]  ? _raw_spin_unlock+0x2d/0x50
[ 2032.522536][T25995]  try_charge+0xfbe/0x1480
[ 2032.526936][T25995]  ? __check_heap_object+0x50/0xb3
[ 2032.532034][T25995]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 2032.537561][T25995]  ? percpu_ref_tryget_live+0x111/0x290
[ 2032.543091][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2032.549327][T25995]  ? kasan_check_read+0x11/0x20
[ 2032.554182][T25995]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 2032.559709][T25995]  mem_cgroup_try_charge+0x24d/0x5e0
[ 2032.564981][T25995]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 2032.570598][T25995]  shmem_getpage_gfp+0x69e/0x2500
[ 2032.575614][T25995]  ? shmem_unuse_inode+0x1010/0x1010
[ 2032.581057][T25995]  ? lock_downgrade+0x920/0x920
[ 2032.585902][T25995]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2032.591627][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2032.597856][T25995]  shmem_fault+0x22d/0x760
[ 2032.602255][T25995]  ? find_held_lock+0x35/0x130
[ 2032.607006][T25995]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 2032.612974][T25995]  ? lock_downgrade+0x920/0x920
[ 2032.617813][T25995]  __do_fault+0x111/0x4d0
[ 2032.622130][T25995]  __handle_mm_fault+0x2c67/0x3eb0
[ 2032.627227][T25995]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2032.632757][T25995]  ? handle_mm_fault+0x292/0xa90
[ 2032.637689][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2032.643914][T25995]  ? kasan_check_read+0x11/0x20
[ 2032.648752][T25995]  handle_mm_fault+0x3b7/0xa90
[ 2032.653512][T25995]  __get_user_pages+0x7b6/0x1a40
[ 2032.658443][T25995]  ? follow_page_mask+0x19a0/0x19a0
[ 2032.663620][T25995]  ? vma_set_page_prot+0x18c/0x240
[ 2032.668724][T25995]  ? memset+0x32/0x40
[ 2032.672699][T25995]  populate_vma_page_range+0x20d/0x2a0
[ 2032.678142][T25995]  __mm_populate+0x204/0x380
[ 2032.682716][T25995]  ? populate_vma_page_range+0x2a0/0x2a0
[ 2032.688332][T25995]  ? kasan_check_write+0x14/0x20
[ 2032.693255][T25995]  vm_mmap_pgoff+0x213/0x230
[ 2032.697833][T25995]  ? vma_is_stack_for_current+0xd0/0xd0
[ 2032.703361][T25995]  ? kasan_check_read+0x11/0x20
[ 2032.708198][T25995]  ? _copy_to_user+0x118/0x160
[ 2032.712948][T25995]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2032.719176][T25995]  ksys_mmap_pgoff+0xf7/0x630
[ 2032.723839][T25995]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 2032.729460][T25995]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2032.734900][T25995]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2032.740340][T25995]  ? do_syscall_64+0x26/0x680
[ 2032.745013][T25995]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2032.751080][T25995]  __x64_sys_mmap+0xe9/0x1b0
[ 2032.755655][T25995]  do_syscall_64+0xfd/0x680
[ 2032.760144][T25995]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2032.766021][T25995] RIP: 0033:0x459279
[ 2032.769906][T25995] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2032.789489][T25995] RSP: 002b:00007f3f4d9e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2032.797883][T25995] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459279
[ 2032.805921][T25995] RDX: 0000000001000004 RSI: 0000000000b36000 RDI: 0000000020000000
[ 2032.813967][T25995] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000
[ 2032.821949][T25995] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3f4d9e46d4
[ 2032.829901][T25995] R13: 00000000004c5567 R14: 00000000004d9918 R15: 00000000ffffffff
[ 2032.837868][T25995] 
[ 2032.840178][T25995] The buggy address belongs to the page:
[ 2032.845792][T25995] page:ffffea000218a7c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0
[ 2032.854888][T25995] flags: 0x1fffc0000000000()
[ 2032.859469][T25995] raw: 01fffc0000000000 0000000000000000 ffffffff00000101 0000000000000000
[ 2032.868136][T25995] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 2032.876693][T25995] page dumped because: kasan: bad access detected
[ 2032.883079][T25995] 
[ 2032.885387][T25995] Memory state around the buggy address:
[ 2032.891003][T25995]  ffff88808629f780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2032.899048][T25995]  ffff88808629f800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2032.907093][T25995] >ffff88808629f880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2032.915133][T25995]                                                     ^
[ 2032.922054][T25995]  ffff88808629f900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2032.930100][T25995]  ffff88808629f980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2032.938148][T25995] ==================================================================
[ 2032.946190][T25995] Disabling lock debugging due to kernel taint
[ 2032.952325][T25995] Kernel panic - not syncing: panic_on_warn set ...
[ 2032.958906][T25995] CPU: 1 PID: 25995 Comm: syz-executor.4 Tainted: G    B             5.2.0-rc3-next-20190607 #11
[ 2032.969380][T25995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2032.979436][T25995] Call Trace:
[ 2032.983212][T25995]  dump_stack+0x172/0x1f0
[ 2032.987539][T25995]  panic+0x2cb/0x744
[ 2032.991419][T25995]  ? __warn_printk+0xf3/0xf3
[ 2032.995999][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2033.001464][T25995]  ? trace_hardirqs_off+0x62/0x220
[ 2033.006567][T25995]  ? trace_hardirqs_off+0x59/0x220
[ 2033.011666][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2033.017112][T25995]  end_report+0x47/0x4f
[ 2033.021252][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2033.026692][T25995]  __kasan_report.cold+0xe/0x36
[ 2033.031528][T25995]  ? __sanitizer_cov_trace_cmp8+0x20/0x20
[ 2033.037259][T25995]  ? css_task_iter_advance+0x49b/0x540
[ 2033.042703][T25995]  kasan_report+0x12/0x20
[ 2033.047018][T25995]  __asan_report_load4_noabort+0x14/0x20
[ 2033.052640][T25995]  css_task_iter_advance+0x49b/0x540
[ 2033.057923][T25995]  css_task_iter_start+0x18b/0x230
[ 2033.063016][T25995]  ? oom_badness+0x6c0/0x6c0
[ 2033.067595][T25995]  mem_cgroup_scan_tasks+0xaf/0x180
[ 2033.075292][T25995]  ? mem_cgroup_iter_break+0x30/0x30
[ 2033.080582][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2033.086803][T25995]  ? task_will_free_mem+0x139/0x6e0
[ 2033.092000][T25995]  ? rcu_read_unlock+0x16/0x60
[ 2033.096753][T25995]  out_of_memory+0x6b2/0x1280
[ 2033.101415][T25995]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 2033.107218][T25995]  ? oom_killer_disable+0x280/0x280
[ 2033.112408][T25995]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 2033.118200][T25995]  mem_cgroup_out_of_memory+0x1ca/0x230
[ 2033.123824][T25995]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 2033.129448][T25995]  ? do_raw_spin_unlock+0x57/0x270
[ 2033.134545][T25995]  ? _raw_spin_unlock+0x2d/0x50
[ 2033.139383][T25995]  try_charge+0xfbe/0x1480
[ 2033.143782][T25995]  ? __check_heap_object+0x50/0xb3
[ 2033.148883][T25995]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 2033.154415][T25995]  ? percpu_ref_tryget_live+0x111/0x290
[ 2033.159942][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2033.166164][T25995]  ? kasan_check_read+0x11/0x20
[ 2033.171005][T25995]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 2033.176537][T25995]  mem_cgroup_try_charge+0x24d/0x5e0
[ 2033.181818][T25995]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 2033.187436][T25995]  shmem_getpage_gfp+0x69e/0x2500
[ 2033.192483][T25995]  ? shmem_unuse_inode+0x1010/0x1010
[ 2033.197839][T25995]  ? lock_downgrade+0x920/0x920
[ 2033.202675][T25995]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 2033.208390][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2033.214620][T25995]  shmem_fault+0x22d/0x760
[ 2033.219025][T25995]  ? find_held_lock+0x35/0x130
[ 2033.223785][T25995]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 2033.229752][T25995]  ? lock_downgrade+0x920/0x920
[ 2033.234586][T25995]  __do_fault+0x111/0x4d0
[ 2033.238910][T25995]  __handle_mm_fault+0x2c67/0x3eb0
[ 2033.244012][T25995]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 2033.249555][T25995]  ? handle_mm_fault+0x292/0xa90
[ 2033.254481][T25995]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2033.260706][T25995]  ? kasan_check_read+0x11/0x20
[ 2033.265540][T25995]  handle_mm_fault+0x3b7/0xa90
[ 2033.270291][T25995]  __get_user_pages+0x7b6/0x1a40
[ 2033.275214][T25995]  ? follow_page_mask+0x19a0/0x19a0
[ 2033.280566][T25995]  ? vma_set_page_prot+0x18c/0x240
[ 2033.285665][T25995]  ? memset+0x32/0x40
[ 2033.289634][T25995]  populate_vma_page_range+0x20d/0x2a0
[ 2033.295082][T25995]  __mm_populate+0x204/0x380
[ 2033.299669][T25995]  ? populate_vma_page_range+0x2a0/0x2a0
[ 2033.305288][T25995]  ? kasan_check_write+0x14/0x20
[ 2033.310208][T25995]  vm_mmap_pgoff+0x213/0x230
[ 2033.314781][T25995]  ? vma_is_stack_for_current+0xd0/0xd0
[ 2033.320307][T25995]  ? kasan_check_read+0x11/0x20
[ 2033.325155][T25995]  ? _copy_to_user+0x118/0x160
[ 2033.330081][T25995]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2033.336401][T25995]  ksys_mmap_pgoff+0xf7/0x630
[ 2033.341165][T25995]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 2033.346795][T25995]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2033.352242][T25995]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2033.357700][T25995]  ? do_syscall_64+0x26/0x680
[ 2033.362370][T25995]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2033.368426][T25995]  __x64_sys_mmap+0xe9/0x1b0
[ 2033.373001][T25995]  do_syscall_64+0xfd/0x680
[ 2033.377490][T25995]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2033.383450][T25995] RIP: 0033:0x459279
[ 2033.387413][T25995] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2033.407001][T25995] RSP: 002b:00007f3f4d9e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2033.415398][T25995] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459279
[ 2033.423351][T25995] RDX: 0000000001000004 RSI: 0000000000b36000 RDI: 0000000020000000
[ 2033.431305][T25995] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000
[ 2033.439344][T25995] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3f4d9e46d4
[ 2033.447294][T25995] R13: 00000000004c5567 R14: 00000000004d9918 R15: 00000000ffffffff
[ 2034.623804][T25995] Shutting down cpus with NMI
[ 2034.629742][T25995] Kernel Offset: disabled
[ 2034.634065][T25995] Rebooting in 86400 seconds..