9c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:08 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001080)) 18:51:08 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(0xffffffffffffffff, 0x0, 0x2) 18:51:08 executing program 3: bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:08 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:08 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001080)) 18:51:08 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) [ 859.252886][T18477] kvm [18464]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000004 [ 859.270447][T18477] kvm [18464]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000e [ 859.279665][T18477] kvm [18464]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000008 [ 859.299571][T18477] kvm [18464]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001c [ 859.310152][T18477] kvm [18464]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040 18:51:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:11 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6", 0x22}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:11 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001080)) 18:51:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:11 executing program 3: bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:11 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6", 0x22}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001080)) 18:51:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r0, 0x0, 0x2) 18:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:11 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6", 0x22}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001080)) [ 862.196668][T18516] kvm [18510]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000004 [ 862.232258][T18516] kvm [18510]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000e [ 862.312483][T18516] kvm [18510]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000008 [ 862.321206][T18516] kvm [18510]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001c [ 862.330697][T18516] kvm [18510]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040 18:51:14 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r0, 0x0, 0x2) 18:51:14 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6f", 0x33}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, 0x0) 18:51:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:14 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:14 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6f", 0x33}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r0, 0x0, 0x2) 18:51:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, 0x0) 18:51:14 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) 18:51:14 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6f", 0x33}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:17 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, 0x0) 18:51:17 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb", 0x3b}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:17 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) 18:51:17 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:17 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) 18:51:17 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb", 0x3b}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x1f8, 0x3b0, 0x3b0, 0x0, 0x4a0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback={0xe00}, @mcast1={0xff, 0x1, [0x0, 0xd]}, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:random_device_t:s0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 18:51:17 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) 18:51:17 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:17 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb", 0x3b}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 868.225707][T18606] xt_SECMARK: unable to map security context 'system_u:object_r:random_device_t:s0' 18:51:20 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) 18:51:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) 18:51:20 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04", 0x3f}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:20 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:20 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:20 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04", 0x3f}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) [ 871.098719][T18621] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 18:51:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:20 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04", 0x3f}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 871.188372][T18629] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 18:51:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) 18:51:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:23 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d", 0x41}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:23 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:23 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x4}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$peek(0x2, r0, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x37cb1133) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private1, 0x1c}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:51:23 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:51:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) 18:51:23 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:23 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d", 0x41}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r1, 0x0, 0x2) [ 874.128524][T18652] VFS: Warning: syz-executor.5 using old stat() call. Recompile your binary. 18:51:23 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"/2099], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="cee3f8e73fa4d78654727119b1f3", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:51:23 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d", 0x41}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:26 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:51:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b", 0x42}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b", 0x42}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c746572000000000000000000000000f5ffffff000000000000001a00000e000000040000009002000000070000c800000060010000c8000000c8000080f8010000f8010000f8010000f8010000f8010000040000000000009cdfffe37e23d785dc974b7500eeffbe000100000100e60000000000000000000000000000efffffffffffffff0000000000000000e2a883d30000000000030000000000000002000000000000000000001d200000000e000000000000a000c800000000000019000800000080000000000000000030006164647274797065000000000002000000000000000000800000000000007a3c0000000000000000000000000000280052454a4543540000000000cfdcf6e80000df1c00090000000000010000000006000000000000e0000001ac1414bb0040000000040000677265300000000000200000002000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000100000280052454a45435400000000e0ff1bff7f000000fcffffffffffffffffffff000000000000000000000000000000000000000000000700000000000000009ba7fec0ffffffff000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000007000980000000088d4250000000000000000000000000000280053455400000000000000000000000000000000000000000000000000080100000400000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000008a00b2b0b383346782a700000028000000ff000000000000000000a60000000020000020000000000000000000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b", 0x42}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 877.306674][T18705] x_tables: duplicate underflow at hook 2 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:26 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:51:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 877.675303][T18705] x_tables: duplicate underflow at hook 2 18:51:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:51:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:27 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:27 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:27 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) [ 877.853696][T18749] x_tables: duplicate underflow at hook 2 18:51:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:27 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {0x0}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:27 executing program 5: r0 = socket$inet(0x10, 0x2000000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 18:51:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:27 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {0x0}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:27 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {0x0}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:27 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:30 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:30 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10=\x8f\xa2\xc7\x8b\x96|?\x16\xbf\xa1$\xe2\xf4\xa6t#M\xe0l\x0e<\x89\x8df\xa0m\x00\a\xbb\x84\xc2V\xff\xb0j\x06\x00\xba\x1a\xe7@\xab\xe2v\x8a\x97\x88\xd3\xa5\xeePb\x10\xf5\'\xc1\x01\xfew\xdfgCM>\xba\xc6\xe5\xa6\xac\xfa\xed\xdf;') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000bc0)='./file0\x00', 0xc0242, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x71}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 18:51:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r2, 0x0, 0x2) 18:51:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:30 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:30 executing program 5: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, 0x0) 18:51:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) 18:51:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) 18:51:33 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@var, @union={0x0, 0x8, 0x0, 0x5, 0x0, 0x4, [{}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0xd3}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:51:33 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a4", 0x39}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(r3, 0x0, 0x2) 18:51:33 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) read(r3, 0x0, 0x2) 18:51:33 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a4", 0x39}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:33 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:51:33 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a4", 0x39}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) read(r3, 0x0, 0x2) [ 884.131443][T18859] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.5'. 18:51:36 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc", 0x55}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x3, [@var, @union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], 'S'}]}, {0x0, [0x0]}}, 0x0, 0xef}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:51:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) read(r3, 0x0, 0x2) 18:51:36 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc", 0x55}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 18:51:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(0xffffffffffffffff, 0x0, 0x2) 18:51:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc", 0x55}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:39 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(0xffffffffffffffff, 0x0, 0x2) 18:51:39 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a", 0x63}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[], &(0x7f000095dffc)=0x8) 18:51:39 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') read(0xffffffffffffffff, 0x0, 0x2) 18:51:39 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a", 0x63}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:39 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a", 0x63}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:39 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 18:51:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:42 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:42 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53", 0x6a}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) 18:51:42 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a70000"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:51:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:42 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53", 0x6a}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 18:51:42 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53", 0x6a}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:42 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c", 0x6e}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:45 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:45 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:45 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c", 0x6e}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14}], {0x14, 0x10}}, 0x3c}}, 0x0) 18:51:45 executing program 5: 18:51:45 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:51:45 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c", 0x6e}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:45 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8", 0x70}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:48 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8", 0x70}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:48 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:48 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:48 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:51:48 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8", 0x70}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:48 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:48 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:51:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:51 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:51 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:51:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:51:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:51:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, 0x0, 0x0, 0x0, 0x1000) 18:51:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {0x0}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, 0x0, 0x0, 0x0, 0x1000) 18:51:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:51:51 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:51:54 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, 0x0, 0x0, 0x0, 0x1000) 18:51:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {0x0}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:54 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:51:54 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:51:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {0x0}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:54 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:51:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 18:51:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:51:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:57 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:51:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 18:51:57 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:57 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:51:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:51:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 18:51:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 18:51:57 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:57 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 18:51:57 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8b", 0x35}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:51:57 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:51:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:52:00 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:52:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x38}}, 0x0) 18:52:00 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8b", 0x35}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:00 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:52:00 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:52:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) 18:52:00 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8b", 0x35}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:00 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) 18:52:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 18:52:00 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:03 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 18:52:03 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7", 0x4f}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 18:52:03 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:03 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:03 executing program 0: 18:52:03 executing program 0: 18:52:03 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7", 0x4f}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 18:52:03 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7", 0x4f}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:03 executing program 0: 18:52:03 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:06 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 18:52:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:52:06 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135", 0x5c}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:06 executing program 0: 18:52:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:06 executing program 0: 18:52:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135", 0x5c}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:52:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135", 0x5c}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:06 executing program 0: 18:52:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 18:52:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:52:09 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc621551", 0x63}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:09 executing program 0: 18:52:09 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:09 executing program 0: 18:52:09 executing program 4: 18:52:09 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc621551", 0x63}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:09 executing program 4: 18:52:09 executing program 0: 18:52:09 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc621551", 0x63}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:12 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 18:52:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:12 executing program 4: 18:52:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in=@loopback, 0x4e22, 0x3, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, 0xe4) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 18:52:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec", 0x66}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:12 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 18:52:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec", 0x66}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 18:52:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 18:52:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec", 0x66}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 923.598868][T19366] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 923.666774][T19378] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:52:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 18:52:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:15 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f", 0x68}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:15 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:15 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x20000200054f61, 0x80000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff33) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:52:15 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f", 0x68}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 926.505060][T19389] NFS: Device name not specified 18:52:15 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f", 0x68}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100000202f5"], 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x0) dup(0xffffffffffffffff) 18:52:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:15 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) [ 926.728165][T19407] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:16 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) [ 926.776872][T19411] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:18 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 18:52:18 executing program 0: epoll_create(0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 18:52:18 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:52:18 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:18 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {0x0}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:18 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {0x0}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:19 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {0x0}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:19 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:19 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:21 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 18:52:21 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:21 executing program 0: epoll_create(0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 18:52:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:21 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:21 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 18:52:21 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:21 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081", 0x49}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:22 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081", 0x49}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0xfffffffffffffffc) 18:52:24 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 18:52:24 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:24 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081", 0x49}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:24 executing program 0: mq_open(&(0x7f0000000000)='.^@\x00', 0x0, 0x0, 0x0) 18:52:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:24 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33", 0x6e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:24 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:24 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe2, &(0x7f00000003c0)="c4fe910c67e88786cec96ddb4922addee07bee6333b5ca6fdcc0bf1d6951518ceb91b6b78bea2e28c0edaac6c0c68cf4361ed0b05afa0804e04170e4ba5c37d3b52246786e2b6abaa08ac16b2ee1b879ecc76b7bff38df6ec30088eb8548cc33bbd1ae31f55e0383ee0ee787ae8cae076e178a88996fa7264243d3584052106ad885a644509585572d48afedcd4330155808385f4694933391bd5e8046a231829c5109afc875c766b8eb78b77f91aef09c8d26a98eacae19c568b67e15a34d923f6e1cfd22651463745e063559ca617f88f16ebc93955f5befccb3ba3aa2a80f0e8b"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 18:52:24 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33", 0x6e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33", 0x6e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15d", 0x80}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:25 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:25 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15d", 0x80}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15d", 0x80}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe", 0x89}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 936.282441][T19538] debugfs: File 'dropped' in directory 'sg0' already present! [ 936.302694][T19538] debugfs: File 'msg' in directory 'sg0' already present! [ 936.370064][T19538] debugfs: File 'trace0' in directory 'sg0' already present! 18:52:25 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe", 0x89}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:27 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:27 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe", 0x89}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:27 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:27 executing program 1: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148", 0x8e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 938.887666][T19571] debugfs: File 'dropped' in directory 'sg0' already present! [ 938.913938][T19571] debugfs: File 'msg' in directory 'sg0' already present! [ 938.934596][T19571] debugfs: File 'trace0' in directory 'sg0' already present! 18:52:28 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 939.000365][T19576] debugfs: File 'dropped' in directory 'sg0' already present! 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148", 0x8e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 939.060738][T19576] debugfs: File 'msg' in directory 'sg0' already present! 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148", 0x8e}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 939.143406][T19576] debugfs: File 'trace0' in directory 'sg0' already present! [ 939.200847][T19586] debugfs: File 'dropped' in directory 'sg0' already present! [ 939.244542][T19586] debugfs: File 'msg' in directory 'sg0' already present! [ 939.296860][T19586] debugfs: File 'trace0' in directory 'sg0' already present! 18:52:28 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966c", 0x90}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:28 executing program 1: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:28 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x383c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x14) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x800, 0x1000}, {0x2, 0xff23, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x6}, {0x0, 0x3, 0x1800}, {0x4, 0x1}, {0x0, 0x4}], 0x8) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6, 0xfffffffffffffffc}) 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966c", 0x90}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 939.497794][T19609] debugfs: File 'dropped' in directory 'sg0' already present! [ 939.533487][T19609] debugfs: File 'msg' in directory 'sg0' already present! 18:52:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) [ 939.575281][T19609] debugfs: File 'trace0' in directory 'sg0' already present! 18:52:28 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966c", 0x90}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) [ 939.619075][T19614] debugfs: File 'dropped' in directory 'sg0' already present! [ 939.627082][T19614] debugfs: File 'msg' in directory 'sg0' already present! 18:52:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(&(0x7f0000002000)='user\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0xfffffffffffffffc) [ 939.681464][T19614] debugfs: File 'trace0' in directory 'sg0' already present! 18:52:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:29 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:29 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce6", 0x91}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100000202f506000000000000000002000001080006005241530004000380e8000a80"], 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x24000090) 18:52:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 18:52:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:29 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce6", 0x91}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:29 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000080020005db100000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 18:52:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:29 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 940.144645][T19659] device ip6tnl1 entered promiscuous mode 18:52:29 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d54b", 0x7}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce6", 0x91}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 18:52:29 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100000202f506000000000000000002000001080006005241530004000380e8000a80"], 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x24000090) 18:52:30 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:52:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ptrace(0xffffffffffffffff, r0) ptrace$pokeuser(0x6, r0, 0x0, 0xb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 18:52:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:52:30 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x5}}], 0x1, 0x0) 18:52:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="080100000202f506000000000000000002000001080006005241530004000380e8000a80"], 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x24000090) 18:52:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:30 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ptrace(0xffffffffffffffff, r0) ptrace$pokeuser(0x6, r0, 0x0, 0xb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 18:52:30 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ptrace(0xffffffffffffffff, r0) ptrace$pokeuser(0x6, r0, 0x0, 0xb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 18:52:31 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:31 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ptrace(0xffffffffffffffff, r0) ptrace$pokeuser(0x6, r0, 0x0, 0xb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 18:52:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ptrace(0xffffffffffffffff, r0) ptrace$pokeuser(0x6, r0, 0x0, 0xb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000034}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 18:52:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)='8i \t', 0x4}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)='8i \t', 0x4}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:32 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)='8i \t', 0x4}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x600}], 0x1) 18:52:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d5", 0x6}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x600}], 0x1) 18:52:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:33 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d5", 0x6}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:33 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="3869200968d5", 0x6}, {&(0x7f00000004c0)="5d94e1a467af121f77df41871bfab9c3ad96f7ab8b582e3f1184097cb96be819cc9a6c0660b691a8cd0bd36993bc3bbccd24689c376d4d35e8da1f6c64c163290c1c807877a4d8e081155eb485607d497bdb50a9f84b03a018e05ce1e6865320095afaa2744286181a3abdec3e33e2ca1059057de5e388e9ea2c187231d9c15dc755caacee0f04c2fe5cb5583148966ce626", 0x92}, {&(0x7f0000000580)="1030b1e139a147de328fc43ac1207733d716b2a256cdce794b57d2b1c342d18f1f6aca3531afd575013290e840e24dcbe524f9ba8bc95a9f77fed2a4fa7baebf5d932b911e659bcfd5703423fc69d7b48eca0a08147bce6f8420f135aa543abc62155112d9ec108f5c", 0x69}, {&(0x7f0000000600)="32643d7a0206c2e314b40f171a7f7af2e087267f84c117b3d10230abf8ea97a5a8d408da08e7853048206333941426477075536604ee67d6a41dcc2a62fbc96631570b91d77fe4071426b5866031f84ad73cb4b8dc97dff64ac2adb161f5801339218a98be6bbbc3ef53273ae64c77c8eb", 0x71}, {&(0x7f0000000680)="53bec07d6c218036646cc5a7910ff4065e629759cd684efcc45df92b0c6e81ac0ef6e36647ff0c7de2b85dcca0cdbe9df0cd6fa3c980f72b138fcb70915f04647d7b9b", 0x43}, {&(0x7f0000000700)="ed0ea72760010b6a7c16dfe0f8c48de5fd6a6bdfb3547f39f67eff7b21c529661e71cf67e1668391171be29206d80077ffcb34bc99518a88d620d83c8464e9e5f9d7e78f1a55f780e036e8e8bdf855439ad89247b33e71cc9a4c6461c3b9fe35f89ebf", 0x63}], 0x6}}], 0x1, 0x0) 18:52:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:34 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 18:52:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 18:52:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:37 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:37 executing program 1: exit(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) 18:52:37 executing program 0: 18:52:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 0: 18:52:38 executing program 0: 18:52:38 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 0: 18:52:38 executing program 0: 18:52:38 executing program 0: 18:52:38 executing program 0: 18:52:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 1: 18:52:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:38 executing program 0: 18:52:38 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:38 executing program 0: 18:52:38 executing program 1: 18:52:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:39 executing program 0: 18:52:39 executing program 1: 18:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 0: 18:52:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:39 executing program 1: 18:52:39 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:39 executing program 0: 18:52:39 executing program 1: 18:52:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 0: 18:52:39 executing program 1: 18:52:39 executing program 0: 18:52:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 1: 18:52:39 executing program 0: 18:52:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:39 executing program 1: 18:52:39 executing program 0: 18:52:40 executing program 1: 18:52:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 951.154026][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.236121][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.256711][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.274145][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.284853][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.300469][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.336268][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.367887][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.367954][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 951.367998][T20077] kvm [20062]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 18:52:40 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:40 executing program 0: 18:52:40 executing program 1: 18:52:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:40 executing program 0: 18:52:41 executing program 1: 18:52:41 executing program 0: 18:52:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:41 executing program 1: 18:52:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:41 executing program 0: 18:52:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:41 executing program 1: 18:52:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:41 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:41 executing program 1: 18:52:41 executing program 0: 18:52:41 executing program 0: 18:52:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:52:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:41 executing program 0: 18:52:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:41 executing program 1: 18:52:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:52:41 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:41 executing program 0: 18:52:41 executing program 1: 18:52:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:52:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:41 executing program 0: 18:52:41 executing program 1: 18:52:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:42 executing program 0: 18:52:42 executing program 1: 18:52:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:42 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:42 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:42 executing program 0: 18:52:42 executing program 1: 18:52:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:42 executing program 0: 18:52:42 executing program 1: 18:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:42 executing program 0: 18:52:42 executing program 1: 18:52:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:42 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:42 executing program 1: 18:52:42 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:42 executing program 0: 18:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:42 executing program 1: 18:52:42 executing program 0: 18:52:42 executing program 1: 18:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:42 executing program 1: 18:52:42 executing program 0: 18:52:43 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:43 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(0x0, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:43 executing program 1: 18:52:43 executing program 0: 18:52:43 executing program 1: 18:52:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:43 executing program 0: 18:52:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:43 executing program 1: 18:52:43 executing program 0: 18:52:43 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:43 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(0x0, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:43 executing program 0: 18:52:43 executing program 1: 18:52:43 executing program 1: 18:52:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:43 executing program 0: 18:52:43 executing program 1: 18:52:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:44 executing program 0: 18:52:44 executing program 1: 18:52:44 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:44 executing program 1: 18:52:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(0x0, 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:44 executing program 0: 18:52:44 executing program 0: 18:52:44 executing program 1: 18:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:52:44 executing program 0: 18:52:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000000000000001"], 0xfca) 18:52:44 executing program 1: 18:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:44 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:44 executing program 0: 18:52:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:44 executing program 1: 18:52:44 executing program 1: 18:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:44 executing program 0: 18:52:45 executing program 1: 18:52:45 executing program 0: 18:52:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, 0x0, 0xfca) 18:52:45 executing program 1: 18:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:45 executing program 0: 18:52:45 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:45 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:45 executing program 1: 18:52:45 executing program 0: 18:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:45 executing program 1: 18:52:45 executing program 0: [ 956.483416][T20386] kvm_hv_get_msr: 200 callbacks suppressed [ 956.483427][T20386] kvm [20372]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000004 18:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 956.755424][T20386] kvm [20372]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001c 18:52:46 executing program 0: 18:52:46 executing program 1: 18:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, 0x0, 0xfca) 18:52:46 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:46 executing program 1: 18:52:46 executing program 0: 18:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:46 executing program 1: 18:52:46 executing program 0: 18:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:46 executing program 1: 18:52:46 executing program 0: 18:52:46 executing program 1: 18:52:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, 0x0, 0xfca) 18:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:47 executing program 0: 18:52:47 executing program 1: 18:52:47 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:47 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:47 executing program 0: 18:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:47 executing program 1: 18:52:47 executing program 1: 18:52:47 executing program 0: 18:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 958.154936][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000004 [ 958.215839][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000024 [ 958.349879][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001e [ 958.359231][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000008e [ 958.374431][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000e [ 958.385302][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002e [ 958.458111][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000008e [ 958.480705][T20464] kvm [20456]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006e 18:52:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfca) 18:52:47 executing program 1: 18:52:47 executing program 0: 18:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:47 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:48 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:48 executing program 1: 18:52:48 executing program 0: 18:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:48 executing program 1: 18:52:48 executing program 0: 18:52:48 executing program 1: 18:52:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfca) 18:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:48 executing program 0: 18:52:48 executing program 1: 18:52:48 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:48 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:48 executing program 1: 18:52:48 executing program 1: 18:52:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:48 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="232120bedaea18060000000e2f666900fe3020f014d301000000000000005f2346ca7b08000000e362281bc7905a1f46fb893bfabf3d5f2f3b760a021ae067024809b0696de927d2ec000a25a76b98a3f921a76703f6f699f2535a4781dd24a1c5dc51dcdd93476a0a0f442412087352afe3d0"], 0x5a) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000380)=""/212) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x44084) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfca) 18:52:49 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="232120bedaea18060000000e2f666900fe3020f014d301000000000000005f2346ca7b08000000e362281bc7905a1f46fb893bfabf3d5f2f3b760a021ae067024809b0696de927d2ec000a25a76b98a3f921a76703f6f699f2535a4781dd24a1c5dc51dcdd93476a0a0f442412087352afe3d0"], 0x5a) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000380)=""/212) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x44084) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:52:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:49 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:49 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:52:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:49 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="232120bedaea18060000000e2f666900fe3020f014d301000000000000005f2346ca7b08000000e362281bc7905a1f46fb893bfabf3d5f2f3b760a021ae067024809b0696de927d2ec000a25a76b98a3f921a76703f6f699f2535a4781dd24a1c5dc51dcdd93476a0a0f442412087352afe3d0"], 0x5a) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000380)=""/212) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x44084) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:52:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:50 executing program 1: setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) 18:52:50 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfca) 18:52:50 executing program 0: 18:52:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:50 executing program 3: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xab1a6f68ba3a3329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:50 executing program 0: 18:52:50 executing program 0: 18:52:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/214, 0xd6}, {0x0}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x10) fcntl$setstatus(r6, 0x4, 0x6100) timer_delete(0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:52:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000340)="66b9830400000f320f013966b847d7483f0f23d00f21f866350000000f0f23f8bad104ecbaf80c66b8b45bf08c66efbafc0c66edead578770066b8010000000f01c1360f38f1b2fb17660f3815f2673e660f21cf", 0x54}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfca) 18:52:51 executing program 0: syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'macturkish'}}, {@nls={'nls', 0x3d, 'cp874'}}]}) 18:52:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 18:52:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) [ 962.544833][T20710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:52:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket(0x1, 0x5, 0x0) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 18:52:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfca) 18:52:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000340)="66b9830400000f320f013966b847d7483f0f23d00f21f866350000000f0f23f8bad104ecbaf80c66b8b45bf08c66efbafc0c66edead578770066b8010000000f01c1360f38f1b2fb17660f3815f2673e660f21cf", 0x54}], 0x1, 0x9, 0x0, 0x0) removexattr(0x0, &(0x7f00000002c0)=@random={'user.', '/dev/kvm\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) 18:52:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:52 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000"], 0xfca) 18:52:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={[{@data_writeback='data=writeback'}]}) 18:52:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:52:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000000307050000000000"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000"], 0xfca) 18:52:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:52:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000000307050000000000"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:54 executing program 3: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000480)=""/4096) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:52:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000000307050000000000"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:52:54 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r0, 0xc}) 18:52:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800000003070500"/18], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000"], 0xfca) 18:52:55 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r0, 0xc}) 18:52:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800000003070500"/18], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 18:52:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 18:52:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r0, 0xc}) 18:52:55 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800000003070500"/18], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:55 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 966.312122][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:52:55 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000"], 0xfca) 18:52:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:56 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) [ 967.009390][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:52:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 18:52:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:52:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:56 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) 18:52:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0xc}) [ 967.429365][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:52:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000"], 0xfca) 18:52:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:52:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:52:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c00"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000"], 0xfca) 18:52:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c00"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r0]}) 18:52:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) [ 968.743429][T21050] binder: 21034:21050 unknown command 0 [ 968.765964][T21050] binder: 21034:21050 ioctl c0306201 20000280 returned -22 [ 968.780881][T21050] binder: BINDER_SET_CONTEXT_MGR already set 18:52:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:52:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c00"], 0x88}}, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:52:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) [ 968.787716][T21050] binder: 21034:21050 ioctl 40046207 0 returned -16 [ 968.799247][T21055] binder: BINDER_SET_CONTEXT_MGR already set [ 968.805441][T21055] binder: 21034:21055 ioctl 40046207 0 returned -16 [ 968.812993][T21050] binder: 21034:21050 unknown command 0 [ 968.820036][T21050] binder: 21034:21050 ioctl c0306201 20000280 returned -22 [ 969.076449][T21072] binder: 21069:21072 unknown command 0 [ 969.090155][T21072] binder: 21069:21072 ioctl c0306201 20000280 returned -22 18:52:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000"], 0xfca) 18:52:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:52:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 18:52:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:52:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 969.244895][T21085] binder: 21084:21085 unknown command 0 18:52:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 969.345697][T21085] binder: 21084:21085 ioctl c0306201 20000280 returned -22 18:52:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 18:52:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000"], 0xfca) 18:52:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 18:52:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:52:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r1, 0xc}) 18:52:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000030705000000000000000000000000070c0002"], 0x88}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:52:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 970.181062][T21137] binder: 21121:21137 unknown command 0 18:52:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:52:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x42}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0xa4, 0x401, 0x5}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x4, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 970.317176][T21137] binder: 21121:21137 ioctl c0306201 20000280 returned -22 18:52:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:52:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:52:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff020000000000000000"], 0xfca) 18:52:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:52:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 18:53:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:53:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:53:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:53:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 18:53:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) 18:53:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/47], 0xfca) 18:53:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 18:53:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) 18:53:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) 18:53:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[]}) 18:53:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) 18:53:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) 18:53:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 18:53:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/47], 0xfca) 18:53:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[]}) 18:53:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64"], 0x3c}}, 0x0) 18:53:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 975.187264][T21280] binder: 21276:21280 unknown command 0 [ 975.192860][T21280] binder: 21276:21280 ioctl c0306201 20000280 returned -22 18:53:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[]}) [ 975.499937][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:53:04 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) close(r0) 18:53:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/47], 0xfca) 18:53:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:53:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)) 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 18:53:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:53:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 976.085205][T21351] binder: 21336:21351 unknown command 0 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 976.125920][T21358] binder: BINDER_SET_CONTEXT_MGR already set [ 976.148124][T21358] binder: 21349:21358 ioctl 40046207 0 returned -16 [ 976.166988][T21351] binder: 21336:21351 ioctl c0306201 20000280 returned -22 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 976.444912][T21374] binder: 21365:21374 unknown command 0 [ 976.456779][T21374] binder: 21365:21374 ioctl c0306201 20000280 returned -22 18:53:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/49], 0xfca) 18:53:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='de>\x12', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64]}) 18:53:05 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @win={{0x679, 0x7, 0x7f, 0x6}, 0x3, 0x9, &(0x7f00000003c0)={{0x8, 0x3ff, 0xce54, 0x996b}, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x10000}}}, 0x2, &(0x7f0000000640)="d9a7508019902195c3d8dba0c68bc75988ed0a39e4f72a3d5525b70dfe49997836c9d572a7e6c722e7ec6963fe72a57b445890ab14196df6a7c8f2e7ee66057dcb30baa4243c3685bd4b82cb1548a43c1db658d5459f62dbe11698da3b9894455593274e35af69a8e4c73e903ec87dbfc3e2962f2fdf6bbc3bab3837b7bec3914c126f1390b0f9c245826b2a8171ae4028a70408d9e73d33ab84f950", 0x5c}}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24) 18:53:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 976.751723][ T29] audit: type=1804 audit(1591815185.975:15): pid=21391 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 18:53:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 976.857194][ T29] audit: type=1804 audit(1591815186.015:16): pid=21391 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 18:53:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) [ 976.998024][ T29] audit: type=1804 audit(1591815186.175:17): pid=21396 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 [ 977.070153][ T29] audit: type=1804 audit(1591815186.185:18): pid=21391 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 18:53:06 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @win={{0x679, 0x7, 0x7f, 0x6}, 0x3, 0x9, &(0x7f00000003c0)={{0x8, 0x3ff, 0xce54, 0x996b}, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x10000}}}, 0x2, &(0x7f0000000640)="d9a7508019902195c3d8dba0c68bc75988ed0a39e4f72a3d5525b70dfe49997836c9d572a7e6c722e7ec6963fe72a57b445890ab14196df6a7c8f2e7ee66057dcb30baa4243c3685bd4b82cb1548a43c1db658d5459f62dbe11698da3b9894455593274e35af69a8e4c73e903ec87dbfc3e2962f2fdf6bbc3bab3837b7bec3914c126f1390b0f9c245826b2a8171ae4028a70408d9e73d33ab84f950", 0x5c}}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24) 18:53:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 977.203621][ T29] audit: type=1804 audit(1591815186.185:19): pid=21396 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 [ 977.297110][ T29] audit: type=1804 audit(1591815186.205:20): pid=21398 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/917/bus" dev="sda1" ino=16296 res=1 [ 977.436203][ T29] audit: type=1804 audit(1591815186.565:21): pid=21405 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/918/bus" dev="sda1" ino=16329 res=1 [ 977.544353][T21416] binder: 21407:21416 unknown command 0 [ 977.552926][ T29] audit: type=1804 audit(1591815186.575:22): pid=21405 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/918/bus" dev="sda1" ino=16329 res=1 18:53:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/49], 0xfca) 18:53:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:06 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @win={{0x679, 0x7, 0x7f, 0x6}, 0x3, 0x9, &(0x7f00000003c0)={{0x8, 0x3ff, 0xce54, 0x996b}, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x10000}}}, 0x2, &(0x7f0000000640)="d9a7508019902195c3d8dba0c68bc75988ed0a39e4f72a3d5525b70dfe49997836c9d572a7e6c722e7ec6963fe72a57b445890ab14196df6a7c8f2e7ee66057dcb30baa4243c3685bd4b82cb1548a43c1db658d5459f62dbe11698da3b9894455593274e35af69a8e4c73e903ec87dbfc3e2962f2fdf6bbc3bab3837b7bec3914c126f1390b0f9c245826b2a8171ae4028a70408d9e73d33ab84f950", 0x5c}}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24) [ 977.589020][T21420] binder_alloc: 21407: binder_alloc_buf, no vma [ 977.613571][T21416] binder: 21407:21416 ioctl c0306201 20000280 returned -22 18:53:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 977.641573][ T29] audit: type=1804 audit(1591815186.735:23): pid=21405 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/918/bus" dev="sda1" ino=16329 res=1 18:53:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 977.831913][ T29] audit: type=1804 audit(1591815187.055:24): pid=21439 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir756491220/syzkaller.ieqDW5/919/bus" dev="sda1" ino=15802 res=1 18:53:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:53:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:07 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @win={{0x679, 0x7, 0x7f, 0x6}, 0x3, 0x9, &(0x7f00000003c0)={{0x8, 0x3ff, 0xce54, 0x996b}, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x10000}}}, 0x2, &(0x7f0000000640)="d9a7508019902195c3d8dba0c68bc75988ed0a39e4f72a3d5525b70dfe49997836c9d572a7e6c722e7ec6963fe72a57b445890ab14196df6a7c8f2e7ee66057dcb30baa4243c3685bd4b82cb1548a43c1db658d5459f62dbe11698da3b9894455593274e35af69a8e4c73e903ec87dbfc3e2962f2fdf6bbc3bab3837b7bec3914c126f1390b0f9c245826b2a8171ae4028a70408d9e73d33ab84f950", 0x5c}}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24) 18:53:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, 0x0, 0x0) 18:53:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, 0x0, 0x0) [ 978.534958][T21453] binder: 21451:21453 unknown command 0 [ 978.589072][T21456] binder_alloc: 21451: binder_alloc_buf, no vma [ 978.682466][T21453] binder: 21451:21453 ioctl c0306201 20000280 returned -22 18:53:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000609eef7b0f983a0000000000000000000000000000000000ff0200"/49], 0xfca) 18:53:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, 0x0, 0x0) 18:53:08 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @win={{0x679, 0x7, 0x7f, 0x6}, 0x3, 0x9, &(0x7f00000003c0)={{0x8, 0x3ff, 0xce54, 0x996b}, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x10000}}}, 0x2, &(0x7f0000000640)="d9a7508019902195c3d8dba0c68bc75988ed0a39e4f72a3d5525b70dfe49997836c9d572a7e6c722e7ec6963fe72a57b445890ab14196df6a7c8f2e7ee66057dcb30baa4243c3685bd4b82cb1548a43c1db658d5459f62dbe11698da3b9894455593274e35af69a8e4c73e903ec87dbfc3e2962f2fdf6bbc3bab3837b7bec3914c126f1390b0f9c245826b2a8171ae4028a70408d9e73d33ab84f950", 0x5c}}) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24) 18:53:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:08 executing program 5: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:53:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:53:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:53:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x90, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7a}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x20}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x90}}, 0x0) 18:53:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:53:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f00000003c0)=[{}, {r0, 0x2201}], 0x2, 0xfffffff) 18:53:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x200000000}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) [ 979.446203][T21489] binder: 21488:21489 unknown command 0 [ 979.470112][T21489] binder: 21488:21489 ioctl c0306201 20000280 returned -22 [ 979.506846][T21489] binder: BINDER_SET_CONTEXT_MGR already set [ 979.534229][T21489] binder: 21488:21489 ioctl 40046207 0 returned -16 [ 979.534233][T21492] binder: BINDER_SET_CONTEXT_MGR already set [ 979.582858][T21492] binder: 21488:21492 ioctl 40046207 0 returned -16 [ 979.582888][T21491] binder: 21488:21491 unknown command 0 [ 979.610609][T21491] binder: 21488:21491 ioctl c0306201 20000280 returned -22 18:53:09 executing program 5: syz_mount_image$iso9660(&(0x7f0000000480)='iso9660\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$isdn_base(0x22, 0x3, 0x0) dup2(r0, r1) 18:53:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) r0 = gettid() get_robust_list(r0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 18:53:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 18:53:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:09 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14"], 0x66}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), &(0x7f0000000240)=""/171}, 0x20) 18:53:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 18:53:09 executing program 5: close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:53:09 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:09 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = dup(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)) 18:53:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) 18:53:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ff, 0x3}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x400}, 0x0, 0x0, 0xffffffd, 0x0, 0x9, 0x5, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0) [ 980.216006][T21529] device macsec0 entered promiscuous mode 18:53:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 18:53:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:53:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x10) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:11 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0xfffffffffffffe7b, 0x2, 0x0}) [ 982.038870][T21569] binder: 21565:21569 unknown command 0 [ 982.045121][T21569] binder: 21565:21569 ioctl c0306201 20000280 returned -22 18:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 982.629531][T21603] binder: 21599:21603 unknown command 0 [ 982.641489][T21603] binder: 21599:21603 ioctl c0306201 20000280 returned -22 [ 982.674356][T21603] binder: 21599:21603 ioctl c0306201 20000540 returned -14 [ 982.686739][T21602] binder: 21593:21602 unknown command 0 [ 982.710845][T21603] binder: BINDER_SET_CONTEXT_MGR already set [ 982.734388][T21610] binder: BINDER_SET_CONTEXT_MGR already set [ 982.742187][T21603] binder: 21599:21603 ioctl 40046207 0 returned -16 [ 982.756054][T21610] binder: 21599:21610 ioctl 40046207 0 returned -16 [ 982.770896][T21606] binder: 21599:21606 unknown command 0 [ 982.776973][T21606] binder: 21599:21606 ioctl c0306201 20000280 returned -22 [ 982.783310][T21612] binder: 21599:21612 ioctl c0306201 20000540 returned -14 [ 982.792098][T21602] binder: 21593:21602 ioctl c0306201 20000280 returned -22 18:53:12 executing program 0: syz_mount_image$iso9660(&(0x7f0000000480)='iso9660\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@utf8='utf8'}]}) 18:53:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:12 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) 18:53:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:12 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:53:12 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141803) 18:53:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) [ 983.307526][T21630] binder: 21624:21630 unknown command 0 18:53:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 983.362280][T21630] binder: 21624:21630 ioctl c0306201 20000280 returned -22 18:53:12 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14"], 0x66}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), &(0x7f0000000240)=""/171}, 0x20) 18:53:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:12 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:12 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:13 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x40000000002, 0x3, 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:53:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:13 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:13 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 18:53:13 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:13 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:13 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 18:53:13 executing program 5: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000400)) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000240), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) 18:53:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:14 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) 18:53:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) [ 985.012564][T21725] binder: 21717:21725 unknown command 0 [ 985.044268][T21725] binder: 21717:21725 ioctl c0306201 20000280 returned -22 18:53:14 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) 18:53:14 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:14 executing program 5: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000400)) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000240), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) 18:53:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:53:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:14 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) userfaultfd(0x80800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:53:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 985.920773][T21779] binder: 21756:21779 unknown command 0 18:53:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) [ 985.999227][T21779] binder: 21756:21779 ioctl c0306201 20000280 returned -22 [ 986.358772][T21800] binder: 21798:21800 unknown command 0 [ 986.427605][T21800] binder: 21798:21800 ioctl c0306201 20000280 returned -22 18:53:15 executing program 5: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000400)) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000240), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1ffeb, 0x0) open(0x0, 0x0, 0x0) 18:53:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18:53:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:15 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) userfaultfd(0x80800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18:53:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18:53:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 18:53:16 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) 18:53:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r0}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:53:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 18:53:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 18:53:16 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x955}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 18:53:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r0}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:53:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:16 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:16 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) userfaultfd(0x80800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) 18:53:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r0}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:53:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000340)="66b9830400000f320f013966b847d7483f0f23d00f21f866350000000f0f23f8bad104ecbaf80c66b8b45bf08c66efbafc0c66edead578770066b8010000000f01c1360f38f1b2fb17660f3815f2673e660f21cf", 0x54}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:16 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:16 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) [ 987.703521][T21862] kvm [21861]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 18:53:17 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:17 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) 18:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{}, "47b6b3", [[]]}, 0x123) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 18:53:17 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:17 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:17 executing program 5: 18:53:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:17 executing program 5: 18:53:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:17 executing program 5: 18:53:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:17 executing program 5: 18:53:18 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:18 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r1}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:18 executing program 1: 18:53:18 executing program 5: 18:53:18 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:18 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:18 executing program 5: 18:53:18 executing program 1: 18:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:18 executing program 1: 18:53:18 executing program 5: 18:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:18 executing program 5: 18:53:18 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:18 executing program 1: 18:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:19 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:19 executing program 5: 18:53:19 executing program 1: 18:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:19 executing program 1: 18:53:19 executing program 5: 18:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:19 executing program 1: 18:53:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:19 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:19 executing program 5: 18:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 990.513482][T22011] binder: 21994:22011 unknown command 0 18:53:19 executing program 1: 18:53:19 executing program 5: 18:53:19 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 990.651667][T22011] binder: 21994:22011 ioctl c0306201 20000280 returned -22 18:53:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:20 executing program 1: 18:53:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:20 executing program 5: 18:53:20 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:20 executing program 5: 18:53:20 executing program 1: 18:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:20 executing program 5: 18:53:20 executing program 1: 18:53:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:20 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:20 executing program 5: 18:53:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:20 executing program 1: [ 991.208316][T22070] binder: 22059:22070 unknown command 0 [ 991.214003][T22070] binder: 22059:22070 ioctl c0306201 20000280 returned -22 18:53:20 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:20 executing program 1: 18:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:20 executing program 5: 18:53:20 executing program 5: 18:53:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:20 executing program 5: 18:53:20 executing program 1: 18:53:20 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 991.641133][T22103] binder: 22102:22103 unknown command 0 [ 991.651736][T22103] binder: 22102:22103 ioctl c0306201 20000280 returned -22 18:53:20 executing program 5: 18:53:21 executing program 1: 18:53:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:21 executing program 5: 18:53:21 executing program 1: [ 992.105442][T22136] binder: 22123:22136 unknown command 0 [ 992.160951][T22136] binder: 22123:22136 ioctl c0306201 20000280 returned -22 18:53:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:21 executing program 5: 18:53:21 executing program 1: 18:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:21 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:21 executing program 5: 18:53:21 executing program 1: 18:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:21 executing program 1: 18:53:21 executing program 5: 18:53:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 992.667319][T22169] binder: 22156:22169 unknown command 0 [ 992.675023][T22169] binder: 22156:22169 ioctl c0306201 20000280 returned -22 18:53:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:21 executing program 1: 18:53:21 executing program 5: [ 992.956251][T22181] binder: BINDER_SET_CONTEXT_MGR already set [ 993.002685][T22181] binder: 22179:22181 ioctl 40046207 0 returned -16 [ 993.027615][T22182] binder: 22179:22182 unknown command 0 [ 993.039653][T22182] binder: 22179:22182 ioctl c0306201 20000280 returned -22 18:53:22 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:22 executing program 1: 18:53:22 executing program 5: 18:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:22 executing program 5: 18:53:22 executing program 1: 18:53:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:22 executing program 5: 18:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:22 executing program 1: [ 993.479195][T22205] binder: 22193:22205 ioctl c0306201 0 returned -14 [ 993.560825][T22216] binder: 22193:22216 unknown command 0 [ 993.620950][T22216] binder: 22193:22216 ioctl c0306201 20000280 returned -22 18:53:23 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:23 executing program 1: 18:53:23 executing program 5: 18:53:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:23 executing program 5: 18:53:23 executing program 1: 18:53:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:23 executing program 1: 18:53:23 executing program 5: [ 994.148533][T22240] binder: 22226:22240 ioctl c0306201 0 returned -14 [ 994.266064][T22252] binder: 22226:22252 unknown command 0 [ 994.301712][T22252] binder: 22226:22252 ioctl c0306201 20000280 returned -22 18:53:23 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:23 executing program 1: 18:53:23 executing program 5: 18:53:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:23 executing program 1: 18:53:23 executing program 5: 18:53:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:24 executing program 1: 18:53:24 executing program 5: [ 994.995536][T22285] binder: 22268:22285 ioctl c0306201 0 returned -14 [ 995.060828][T22289] binder: 22268:22289 unknown command 0 [ 995.111138][T22289] binder: 22268:22289 ioctl c0306201 20000280 returned -22 18:53:24 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:24 executing program 5: 18:53:24 executing program 1: 18:53:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:24 executing program 1: 18:53:24 executing program 5: 18:53:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:53:24 executing program 1: 18:53:24 executing program 5: [ 995.578408][T22312] binder: 22295:22312 ioctl c0306201 20000200 returned -14 [ 995.645293][T22321] binder: 22295:22321 unknown command 0 [ 995.698594][T22321] binder: 22295:22321 ioctl c0306201 20000280 returned -22 18:53:25 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:53:25 executing program 1: 18:53:25 executing program 5: 18:53:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0xff) close(0xffffffffffffffff) 18:53:25 executing program 5: 18:53:25 executing program 1: 18:53:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:53:25 executing program 5: 18:53:25 executing program 1: [ 996.171929][T22333] binder: 22329:22333 ioctl c0306201 20000200 returned -14 18:53:25 executing program 5: [ 996.249463][T22349] binder: 22329:22349 unknown command 0 [ 996.426649][T22349] binder: 22329:22349 ioctl c0306201 20000280 returned -22 18:53:25 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:25 executing program 1: 18:53:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:53:25 executing program 5: 18:53:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0xff) close(0xffffffffffffffff) 18:53:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:26 executing program 1: 18:53:26 executing program 5: 18:53:26 executing program 2: 18:53:26 executing program 5: 18:53:26 executing program 1: [ 996.965935][T22380] binder: 22365:22380 ioctl c0306201 20000200 returned -14 18:53:26 executing program 5: [ 997.032613][T22384] binder: 22365:22384 unknown command 0 [ 997.133919][T22384] binder: 22365:22384 ioctl c0306201 20000280 returned -22 18:53:26 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:26 executing program 2: 18:53:26 executing program 1: 18:53:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0xff) close(0xffffffffffffffff) 18:53:26 executing program 5: 18:53:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:26 executing program 5: 18:53:26 executing program 1: 18:53:26 executing program 2: 18:53:26 executing program 5: 18:53:26 executing program 2: 18:53:26 executing program 1: [ 997.655650][T22404] binder: 22393:22404 unknown command 0 [ 997.693922][T22407] binder: 22393:22407 unknown command 0 [ 997.773261][T22404] binder: 22393:22404 ioctl c0306201 20000200 returned -22 [ 997.807763][T22407] binder: 22393:22407 ioctl c0306201 20000280 returned -22 18:53:27 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:27 executing program 5: 18:53:27 executing program 1: 18:53:27 executing program 2: 18:53:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:27 executing program 1: 18:53:27 executing program 2: 18:53:27 executing program 5: 18:53:27 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:27 executing program 1: 18:53:27 executing program 2: 18:53:27 executing program 5: 18:53:27 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 998.325217][T22426] binder: 22417:22426 unknown command 0 18:53:27 executing program 1: 18:53:27 executing program 2: [ 998.423489][T22432] binder: 22417:22432 unknown command 0 [ 998.461686][T22426] binder: 22417:22426 ioctl c0306201 20000200 returned -22 18:53:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:27 executing program 5: 18:53:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:27 executing program 1: 18:53:27 executing program 4: socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:27 executing program 2: [ 998.516795][T22432] binder: 22417:22432 ioctl c0306201 20000280 returned -22 18:53:27 executing program 5: 18:53:27 executing program 2: 18:53:27 executing program 1: 18:53:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:27 executing program 4: socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:27 executing program 5: [ 998.829906][T22458] binder: 22457:22458 unknown command 0 [ 998.869044][T22458] binder: 22457:22458 ioctl c0306201 20000200 returned -22 [ 998.896578][T22459] binder: 22457:22459 unknown command 0 [ 998.902492][T22459] binder: 22457:22459 ioctl c0306201 20000280 returned -22 18:53:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:28 executing program 1: 18:53:28 executing program 2: 18:53:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:28 executing program 5: 18:53:28 executing program 4: socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = userfaultfd(0x80800) ioctl$FIOCLEX(r4, 0x5451) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:28 executing program 1: 18:53:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:28 executing program 2: 18:53:28 executing program 5: 18:53:28 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:28 executing program 1: 18:53:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:28 executing program 5: 18:53:28 executing program 2: 18:53:28 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:28 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x48}}, 0x0) 18:53:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 999.322689][T22478] binder: 22477:22478 unknown command 0 [ 999.328510][T22478] binder: 22477:22478 ioctl c0306201 20000200 returned -22 [ 999.344973][T22478] binder: 22477:22478 unknown command 0 [ 999.350785][T22478] binder: 22477:22478 ioctl c0306201 20000280 returned -22 18:53:28 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x97, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/126) 18:53:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x108, 0x108, 0x210, 0x108, 0x0, 0x318, 0x2e0, 0x2e0, 0x2e0, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @private1, [], [], 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 18:53:28 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 999.509183][T22491] x_tables: duplicate underflow at hook 2 [ 999.520580][T22492] x_tables: duplicate underflow at hook 2 18:53:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/45}, 0x18) 18:53:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:28 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "eace5e89c8401bcaee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) [ 999.690571][T22506] No such timeout policy "syz1" [ 999.706859][T22507] binder: 22498:22507 unknown command 0 [ 999.712622][T22507] binder: 22498:22507 ioctl c0306201 20000200 returned -22 [ 999.727996][T22507] binder: 22498:22507 unknown command 0 18:53:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/45}, 0x18) 18:53:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 999.741563][T22509] No such timeout policy "syz1" [ 999.768208][T22507] binder: 22498:22507 ioctl c0306201 20000280 returned -22 18:53:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) [ 1000.010732][T22522] input: syz1 as /devices/virtual/input/input6 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1000.106415][T22532] input: syz1 as /devices/virtual/input/input7 18:53:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:29 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1000.284577][T22549] binder: 22539:22549 unknown command 0 [ 1000.290749][T22549] binder: 22539:22549 ioctl c0306201 20000200 returned -22 [ 1000.304557][T22549] binder: 22539:22549 unknown command 0 [ 1000.310288][T22549] binder: 22539:22549 ioctl c0306201 20000280 returned -22 [ 1000.407575][T22559] input: syz1 as /devices/virtual/input/input8 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r2 = getpid() ptrace$setregs(0xf, r2, 0x0, 0x0) 18:53:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r3 = getpid() ptrace$setregs(0xf, r3, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) 18:53:29 executing program 4: socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1000.569479][T22570] binder: 22565:22570 unknown command 25348 18:53:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) getpid() [ 1000.627845][T22576] input: syz1 as /devices/virtual/input/input9 [ 1000.663362][T22577] binder: 22565:22577 unknown command 0 [ 1000.704684][T22570] binder: 22565:22570 ioctl c0306201 20000200 returned -22 [ 1000.712374][T22577] binder: 22565:22577 ioctl c0306201 20000280 returned -22 18:53:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) r2 = getpid() ptrace$setregs(0xf, r2, 0x0, 0x0) 18:53:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:30 executing program 4: socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) getpid() 18:53:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:30 executing program 4: socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1000.960567][T22600] input: syz1 as /devices/virtual/input/input10 18:53:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) [ 1001.144708][T22619] input: syz1 as /devices/virtual/input/input11 [ 1001.191249][T22620] binder: 22602:22620 unknown command 25348 [ 1001.198492][T22620] binder: 22602:22620 ioctl c0306201 20000200 returned -22 18:53:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:30 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 18:53:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1001.260789][T22627] binder: 22602:22627 unknown command 0 [ 1001.266782][T22627] binder: 22602:22627 ioctl c0306201 20000280 returned -22 18:53:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 18:53:30 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1001.382344][T22637] input: syz1 as /devices/virtual/input/input12 18:53:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) [ 1001.606292][T22656] input: syz1 as /devices/virtual/input/input13 18:53:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 18:53:31 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1001.762805][T22666] binder: 22658:22666 unknown command 25348 [ 1001.770428][T22666] binder: 22658:22666 ioctl c0306201 20000200 returned -22 [ 1001.785386][T22666] binder: 22658:22666 unknown command 0 [ 1001.792065][T22666] binder: 22658:22666 ioctl c0306201 20000280 returned -22 18:53:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 1001.869760][T22674] input: syz1 as /devices/virtual/input/input14 18:53:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:31 executing program 2: socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:31 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xff) close(r0) 18:53:31 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 1002.045841][T22690] input: syz1 as /devices/virtual/input/input15 [ 1002.213029][T22706] binder: 22688:22706 unknown command 287492 [ 1002.280042][T22707] binder: 22688:22707 unknown command 0 [ 1002.296416][T22706] binder: 22688:22706 ioctl c0306201 20000200 returned -22 [ 1002.349819][T22707] binder: 22688:22707 ioctl c0306201 20000280 returned -22 18:53:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xff) close(r0) 18:53:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:31 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 1002.573806][T22713] input: syz1 as /devices/virtual/input/input16 18:53:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:31 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:31 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xff) close(r0) 18:53:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) [ 1002.876757][T22741] binder: 22726:22741 unknown command 287492 [ 1002.952414][T22745] binder: 22726:22745 unknown command 0 [ 1002.993944][T22741] binder: 22726:22741 ioctl c0306201 20000200 returned -22 [ 1003.053621][T22745] binder: 22726:22745 ioctl c0306201 20000280 returned -22 18:53:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:32 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:32 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:32 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:32 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:32 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1003.449520][T22773] binder: 22772:22773 unknown command 287492 [ 1003.463350][T22773] binder: 22772:22773 ioctl c0306201 20000200 returned -22 [ 1003.535684][T22773] binder: 22772:22773 unknown command 0 [ 1003.623661][T22773] binder: 22772:22773 ioctl c0306201 20000280 returned -22 18:53:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:33 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:33 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:33 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:33 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:53:33 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 18:53:33 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:53:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:33 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, &(0x7f00000000c0)) 18:53:33 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:33 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:53:33 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 18:53:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 18:53:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 18:53:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:34 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = userfaultfd(0x80800) ioctl$FIOCLEX(r5, 0x5451) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:53:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:34 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x41000, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) unlink(&(0x7f0000000680)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 18:53:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:37 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x20000}]}}]}, 0x38}}, 0x0) 18:53:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:40 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:40 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) 18:53:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xff) close(r1) 18:53:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1011.124235][T22950] binder: 22935:22950 unknown command 0 [ 1011.157477][T22950] binder: 22935:22950 ioctl c0306201 20000280 returned -22 18:53:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:53:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1011.185806][T22955] binder_alloc: 22935: binder_alloc_buf, no vma 18:53:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1011.237660][T22959] x_tables: duplicate underflow at hook 1 18:53:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1011.491112][T22959] x_tables: duplicate underflow at hook 1 18:53:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:43 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b6a, &(0x7f0000000640)) 18:53:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1014.150136][T22988] binder: 22974:22988 unknown command 0 18:53:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="01a5bc1dec909b2e70e0dcfe88af57688cb402595c34"], 0x9) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x4206, 0x0, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) [ 1014.234389][T22988] binder: 22974:22988 ioctl c0306201 20000280 returned -22 [ 1014.246037][T22991] binder_alloc: 22974: binder_alloc_buf, no vma 18:53:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) [ 1014.614618][T23010] binder: 23006:23010 unknown command 0 [ 1014.620335][T23010] binder: 23006:23010 ioctl c0306201 20000280 returned -22 [ 1014.630568][T23010] binder_alloc: 23006: binder_alloc_buf, no vma 18:53:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a7000000008a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d9246a8f6542614f2f03f76a9084f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791484f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d899f1c95252cf9032624d3901edefc7c2c507cd03e263fc024ae73f61c64d3c2ddbf4990f7f423c4b2a463364d85a1c9cfafc570b652187c50b4ec964741d3ad636e9180a0230c51f71c3f52d9cb4bc1acd6cd3ea35868cf0d67f96e506d8c0008034d56415f3cf8678390625d08894fbfc9fb6169a5f901a5eba2ecf3032dc80c95d1f872a6a1619c227ae298a946c589677df33ba2d821450857becb950d64f103a081558fdf492fd8f0574f2467ffa7c79cf18c61c982ae3470e312a2e5e14e27865a7c582b378918253ad0b5dbc42aebf42ee0e6471c4b4e1244f375438c80febc4ac697043e21c50763"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:53:46 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:46 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1017.250855][T23034] binder: 23014:23034 unknown command 0 [ 1017.253040][T23033] input: syz1 as /devices/virtual/input/input35 [ 1017.293614][T23034] binder: 23014:23034 ioctl c0306201 20000280 returned -22 18:53:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:46 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', 0x0, 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1017.438392][T23054] input: syz1 as /devices/virtual/input/input36 18:53:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', 0x0, 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:49 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1020.200667][T23077] input: syz1 as /devices/virtual/input/input37 18:53:49 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', 0x0, 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1020.321474][T23087] binder: 23067:23087 unknown command 0 [ 1020.368194][T23093] input: syz1 as /devices/virtual/input/input38 [ 1020.388207][T23087] binder: 23067:23087 ioctl c0306201 20000280 returned -22 18:53:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:49 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1020.536877][T23108] input: syz1 as /devices/virtual/input/input39 18:53:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:52 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a7000000008a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d9246a8f6542614f2f03f76a9084f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791484f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d899f1c95252cf9032624d3901edefc7c2c507cd03e263fc024ae73f61c64d3c2ddbf4990f7f423c4b2a463364d85a1c9cfafc570b652187c50b4ec964741d3ad636e9180a0230c51f71c3f52d9cb4bc1acd6cd3ea35868cf0d67f96e506d8c0008034d56415f3cf8678390625d08894fbfc9fb6169a5f901a5eba2ecf3032dc80c95d1f872a6a1619c227ae298a946c589677df33ba2d821450857becb950d64f103a081558fdf492fd8f0574f2467ffa7c79cf18c61c982ae3470e312a2e5e14e27865a7c582b378918253ad0b5dbc42aebf42ee0e6471c4b4e1244f375438c80febc4ac697043e21c50763"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1023.244877][T23125] input: syz1 as /devices/virtual/input/input40 18:53:52 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:53:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) [ 1023.348807][T23140] binder: 23126:23140 unknown command 0 18:53:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000100)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xfffffffffffffffb}, {&(0x7f0000000240)="42a914220ebd4a50e11893129a23c7e15097d7448720738da9207161304c6a7302f3c7d6a7508bec4c3fea8e873ef8264f52f9634be0fac34321f31f6bf09e9255764e6d4906ef03bac28e770e325ca1597141a791847774bb9c9427d93eb3a0f0b2e28cfa3684bf0ccd8ad88ae92a84848e2df5c2aa275e8947c4626440b64b9c053bd36a3e1cab1ffbf79c2e4e", 0x8e, 0xd}], 0x4801, 0x0) [ 1023.424669][T23140] binder: 23126:23140 ioctl c0306201 20000280 returned -22 [ 1023.456480][T23152] input: syz1 as /devices/virtual/input/input41 18:53:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1023.638709][T23166] input: syz1 as /devices/virtual/input/input42 18:53:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:53:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1026.294575][T23178] input: syz1 as /devices/virtual/input/input43 18:53:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:53:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040), 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1026.589704][T23220] input: syz1 as /devices/virtual/input/input44 18:53:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:53:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:53:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040), 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:53:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:53:58 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1029.335833][T23246] input: syz1 as /devices/virtual/input/input45 18:53:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040), 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:53:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000040), 0x2) 18:53:58 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:53:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:53:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000040), 0x2) [ 1029.566353][T23273] input: syz1 as /devices/virtual/input/input46 18:53:58 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:54:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:54:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:01 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:01 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = userfaultfd(0x80800) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1032.373431][T23297] input: syz1 as /devices/virtual/input/input47 18:54:01 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000040), 0x2) 18:54:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:01 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x0) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:54:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:01 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000040), 0x2) [ 1032.552678][T23319] input: syz1 as /devices/virtual/input/input48 18:54:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1032.723562][T23332] input: syz1 as /devices/virtual/input/input49 18:54:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:54:04 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000040), 0x2) 18:54:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{0x0}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:04 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x0) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:54:04 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1035.453287][T23352] input: syz1 as /devices/virtual/input/input50 18:54:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{0x0}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:04 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1035.614226][T23358] binder: 23343:23358 ioctl c0306201 0 returned -14 [ 1035.639617][T23370] input: syz1 as /devices/virtual/input/input51 18:54:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1035.829363][T23387] input: syz1 as /devices/virtual/input/input52 18:54:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:05 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+', 0x1}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1036.013643][T23398] input: syz1 as /devices/virtual/input/input53 [ 1036.185297][T23405] binder: 23401:23405 ioctl c0306201 0 returned -14 18:54:05 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = userfaultfd(0x0) ioctl$FIOCLEX(r6, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x4000}, 0x0) 18:54:05 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{0x0}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+', 0x1}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:54:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:05 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) [ 1036.349262][T23413] input: syz1 as /devices/virtual/input/input54 18:54:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+', 0x1}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 1036.541990][T23420] binder: 23414:23420 ioctl c0306201 0 returned -14 [ 1036.564917][T23432] input: syz1 as /devices/virtual/input/input55 18:54:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:54:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:54:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:08 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) userfaultfd(0x80800) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1038.847997][T23446] input: syz1 as /devices/virtual/input/input56 18:54:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:54:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) [ 1039.021697][T23467] input: syz1 as /devices/virtual/input/input57 [ 1039.059992][T23468] binder: 23448:23468 ioctl c0306201 20000280 returned -14 18:54:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 18:54:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, 0x0, 0x0) write$vhci(r0, &(0x7f0000000040), 0x2) [ 1039.201659][T23480] input: syz1 as /devices/virtual/input/input58 18:54:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:54:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 18:54:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, 0x0, 0x0) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/141, 0x8d}, @fda={0x66646185, 0x0, 0x0, 0x6}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x2, 0x0}) 18:54:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ffffffffffff576, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="1f", 0x1, 0x40488d5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xff) close(r2) 18:54:11 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) userfaultfd(0x80800) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 1041.916761][T23497] input: syz1 as /devices/virtual/input/input59 18:54:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, 0x0, 0x0) write$vhci(r0, &(0x7f0000000040), 0x2) 18:54:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 18:54:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000040), 0x2) [ 1042.092678][T23513] binder: 23496:23513 ioctl c0306201 20000280 returned -14 [ 1042.123980][T23516] input: syz1 as /devices/virtual/input/input60 [ 1042.202441][ T1521] ================================================================== [ 1042.210825][ T1521] BUG: KASAN: slab-out-of-bounds in hci_event_packet+0x724/0x1a820 [ 1042.218720][ T1521] Read of size 6 at addr ffff8880a21f1206 by task kworker/u5:0/1521 [ 1042.227646][ T1521] [ 1042.229982][ T1521] CPU: 0 PID: 1521 Comm: kworker/u5:0 Not tainted 5.7.0-syzkaller #0 [ 1042.238039][ T1521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.248231][ T1521] Workqueue: hci0 hci_rx_work [ 1042.252923][ T1521] Call Trace: [ 1042.256216][ T1521] dump_stack+0x1e9/0x30e [ 1042.260883][ T1521] print_address_description+0x66/0x5a0 [ 1042.266435][ T1521] ? vprintk_emit+0x342/0x3c0 [ 1042.271126][ T1521] ? printk+0x62/0x83 [ 1042.276935][ T1521] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1042.282941][ T1521] ? vprintk_emit+0x339/0x3c0 [ 1042.285271][T23530] input: syz1 as /devices/virtual/input/input61 [ 1042.287620][ T1521] kasan_report+0x132/0x1d0 18:54:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) [ 1042.287649][ T1521] ? hci_event_packet+0x724/0x1a820 [ 1042.287658][ T1521] ? memcpy+0x3c/0x60 [ 1042.287674][ T1521] check_memory_region+0x2b5/0x2f0 [ 1042.312728][ T1521] ? hci_event_packet+0x724/0x1a820 [ 1042.317943][ T1521] memcpy+0x25/0x60 [ 1042.321782][ T1521] hci_event_packet+0x724/0x1a820 [ 1042.326855][ T1521] hci_rx_work+0x24a/0xa60 [ 1042.331377][ T1521] process_one_work+0x76e/0xfd0 [ 1042.336242][ T1521] worker_thread+0xa7f/0x1450 [ 1042.341032][ T1521] kthread+0x353/0x380 [ 1042.345103][ T1521] ? rcu_lock_release+0x20/0x20 [ 1042.349949][ T1521] ? kthread_blkcg+0xd0/0xd0 [ 1042.354564][ T1521] ret_from_fork+0x24/0x30 [ 1042.359264][ T1521] [ 1042.362112][ T1521] Allocated by task 23523: [ 1042.366531][ T1521] __kasan_kmalloc+0x103/0x140 [ 1042.371770][ T1521] __alloc_skb+0xde/0x4f0 [ 1042.376099][ T1521] vhci_write+0xb7/0x400 [ 1042.380440][ T1521] __vfs_write+0x52f/0x6e0 [ 1042.384953][ T1521] vfs_write+0x274/0x580 [ 1042.389383][ T1521] ksys_write+0x11b/0x220 [ 1042.394667][ T1521] do_syscall_64+0xf3/0x1b0 [ 1042.399267][ T1521] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1042.405593][ T1521] [ 1042.407919][ T1521] Freed by task 2512: [ 1042.411923][ T1521] __kasan_slab_free+0x114/0x170 [ 1042.416887][ T1521] kfree+0x10a/0x220 [ 1042.420787][ T1521] __kfree_skb+0x56/0x1c0 [ 1042.425114][ T1521] wg_packet_rx_poll+0x20b8/0x2700 [ 1042.430290][ T1521] net_rx_action+0x62f/0x1140 [ 1042.435055][ T1521] __do_softirq+0x268/0x80c [ 1042.440259][ T1521] [ 1042.442585][ T1521] The buggy address belongs to the object at ffff8880a21f1000 [ 1042.442585][ T1521] which belongs to the cache kmalloc-512 of size 512 [ 1042.456899][ T1521] The buggy address is located 6 bytes to the right of [ 1042.456899][ T1521] 512-byte region [ffff8880a21f1000, ffff8880a21f1200) [ 1042.471996][ T1521] The buggy address belongs to the page: [ 1042.477748][ T1521] page:ffffea0002887c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 1042.487117][ T1521] flags: 0xfffe0000000200(slab) [ 1042.491971][ T1521] raw: 00fffe0000000200 ffffea000267a648 ffffea00023c3cc8 ffff8880aa400a80 [ 1042.500932][ T1521] raw: 0000000000000000 ffff8880a21f1000 0000000100000004 0000000000000000 [ 1042.509702][ T1521] page dumped because: kasan: bad access detected [ 1042.516124][ T1521] [ 1042.518447][ T1521] Memory state around the buggy address: [ 1042.524076][ T1521] ffff8880a21f1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.532134][ T1521] ffff8880a21f1180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.540278][ T1521] >ffff8880a21f1200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1042.548355][ T1521] ^ [ 1042.552417][ T1521] ffff8880a21f1280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1042.560571][ T1521] ffff8880a21f1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1042.568626][ T1521] ================================================================== [ 1042.576680][ T1521] Disabling lock debugging due to kernel taint [ 1042.586852][ T1521] Kernel panic - not syncing: panic_on_warn set ... [ 1042.593453][ T1521] CPU: 0 PID: 1521 Comm: kworker/u5:0 Tainted: G B 5.7.0-syzkaller #0 [ 1042.603328][ T1521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.613385][ T1521] Workqueue: hci0 hci_rx_work [ 1042.618053][ T1521] Call Trace: [ 1042.621339][ T1521] dump_stack+0x1e9/0x30e [ 1042.625688][ T1521] panic+0x264/0x7a0 [ 1042.629812][ T1521] ? trace_hardirqs_on+0x30/0x80 [ 1042.635878][ T1521] kasan_report+0x1c9/0x1d0 [ 1042.640411][ T1521] ? hci_event_packet+0x724/0x1a820 [ 1042.645638][ T1521] ? memcpy+0x3c/0x60 [ 1042.649640][ T1521] check_memory_region+0x2b5/0x2f0 [ 1042.654743][ T1521] ? hci_event_packet+0x724/0x1a820 [ 1042.660417][ T1521] memcpy+0x25/0x60 [ 1042.664223][ T1521] hci_event_packet+0x724/0x1a820 [ 1042.669270][ T1521] hci_rx_work+0x24a/0xa60 [ 1042.673685][ T1521] process_one_work+0x76e/0xfd0 [ 1042.678541][ T1521] worker_thread+0xa7f/0x1450 [ 1042.683220][ T1521] kthread+0x353/0x380 [ 1042.687318][ T1521] ? rcu_lock_release+0x20/0x20 [ 1042.692169][ T1521] ? kthread_blkcg+0xd0/0xd0 [ 1042.696933][ T1521] ret_from_fork+0x24/0x30 [ 1042.702818][ T1521] Kernel Offset: disabled [ 1042.708030][ T1521] Rebooting in 86400 seconds..