dc802dc8a6847a7653a7553692aad388983dd5c60b818b2143fdb18cceb1b8e38b814ef1942b7d4429918091a6cbf775db25990d202b3e0effd1e42e9a9d801ef4ee8a8166e3742bd1ff136b8c74be0ade26f737ae4d8158bb8d6e42574afc75040862fa1a81f04492cad09c08db1af67ca529d26d1f1f79b17b1045627665dc1d1e0b2023dadd47b9f3f154066aabb0805a7591a834c26005a4ee9f2c0b589b57a32630916f119e15425e18b77389d1a77d1017eb282c91237c4577b1138556c91736175c71327e24a1533c51778d8cd71cdaac534bd982be50b699180de5574cb4d6d385ed69704c0791c5f697a5b477069b7f2424a4a940dc25c501ccc26328451d283d96e8628ef4e5423e75bb032af7760376ee47ed06414a20b5874c6a16e245437fa16805fd21bf4e22a01073dc0243e943be286ea71f6cd6a9b56a71ce2bb03e93554fc2cdb9af14a2c5ca06a30da72cdef4fff471888798368387ce336f3f9fa421b8c3d6e8a76d36286f9412bb940a88d31ebf03679d349479c6e09453ad3a2c47684dc55d6ab0793b322c6375d5ef1200eb0b0562049c44f29ef6bd9600bf8a2514950546e6352285afc2f044f12673337e7afb88543b3e75ec6a77283b9bd77fb4062a17674df9eddf4fb49411ec7653afe4999903c8f2ac7fd26775e8a049184a454c8d0f488f5800681153380ced4fc12bbad27f39fb2a84ab347aff918321af4d93ef541f540aebddeecdfd5a9e194266ba47096e013dd96f91511dad51d1f9dc860a14961f48619f21e11ded1df9de68903e62ed1d6ba9afa11a2147f9cbe59dbc61a00141c3f37e0a0050adc68042d9827ea89ae47fb0a686d0d64db1496b539bd6cf1a430a0c100c19353b112f52fcc18875762eef0beb1561bd3835f627384093f944008bffa2162d50cd556a56681fa97bf54df94a371afdf74cc2863ccd0a28dd8101030d6d1db4ddaf0d0b8dc01263894d801efab3cb634f0bb863881135cc245d16497c691fa10aa8aaf6e975714a6cd9c46fc9fc5dcfb445c7539b59e89afd0a33ae6cf02ced1780e51b784fea2b2c2b53d7e3580b4793c97c0edde67e18eb36ad74fc3c184492dac9bfc2c2c9d9671522e961b4e514d559dbd08767080d736ae58ecaa08c7c0d60f93b64a83d3c933c93f4afae4408b4a3ca876a2a7032045984b32020a64c99457c9e653669e236b1de14272bc317288e34aef2d1de67b0d7009f82eb9dfcd44d3c09366194e60784a18f642302415ca4ec8925501e70d698264f62d7ed694af0f66e54ce57bd7a93096b0dbdcdc66bf422952d2421cece1ecb180ffd34b21ac631b27aae5581b1140488d130dc5d4471d0b5df54b8c9d0bf65ffb31d7f6f7dc7eec7228b78d2f0b8d6ed3a00ccbcdb36e01334aec2ebfad604f68c3d6233aed656b26e90cbed27420cd2a52a963d9c91b5f9b07d96c0605ea0f39ae3acfc6e170cea89d97ec24429bc99df735453d07a4a7db5fcea311750f2f229264907015bad7bb521000bd6760765512226652c56893380a1353c852284a46cb1018c05a1f39ba3250cef6bff74196e549b95de2c671bebf925cdf19accc9e205e9c071c6a78715ad18d7d5c204ea0f244cabaa362f25d5bc7bb98c16dd131e9604102e7aaecae1c58e816df3f3cfef03f20eb144bcdbfc112007cebc670ce917be2e742274657eaf92ca59a29e8bbe86ce0affdc1fad06168524ac041e10a8dd4a0188659123b290ed2e4fffae71dac88f2ca7a3ce060f732f6226f144c68f403e1d7a3091367b44583ee148df5f2da72b6970716c838f68c9a97e28450a3fc2df63dc999d33b9d2e1100df07dabb76646fc08168a84fbbf95931f5a632902ef146f0c8b6133e33737470adbb0ccfe76e60d4cc8af38d5adbbfd161a2474658e0f3df60171f1836adc5167d8fa780c77f8a54571a0d172214de8260964604586a93e7097dc39eea5c28cd314742e7ec71acf1a4d972eee1dba9c42bb50cf8a8b905a1c937183de12f90ee6201b7cb1629ec8c3f8f218e551f792daf2b713e095409b542dd3221265f366b99cd08e38ac2ee6acb8d177374d1753916a4221675c8392583bd5461eab0c8ca94d838233ab2ea6a674eec683d111b3b6664f0159c831da2d9e0222c457209a05306c52744d069a019cc5ce6a9d03165dac50df4c6259363fa223e731d4ea8abd82b1164b1c1023d5bd5f7c88629cb1df73e020b926d5b4b3e6edad106492965bf6479d29cfabff95ec9e95d2b623222d1fc24cfa50aa94d3938b0dd9919ae34f22ecc99efbbbabcfabfb227f1a3b3cb008dc955ba96456bc425c3aaae0e39211d2a343e3a9ea89a8cb059226c8d6e9edd6169d54c7de2c1ac7c95c5ffe2991025a10a1e1a0f0bca095d6f235035f8e216ac4882dc2eea46ac794a54de24163925f0c25788c3b2eb7bb49bf1b3823f4f17656b284226ca0ad443fe7145024fd15a6444145b4083dd87751ab028a5488a37650922847cb5d11553fd08c02528fb7ba362e154bd6e31eea7a0e33f45eef466c3d456a226b8abc8602347dfd576cc8fc281f661a6d59024f4f39fdb709968edb9359f3951d988976e1020d6590dcb17de5caf948438d5881eced103fd6c997a0bcc6ed57dd1620272319da3af5147b0c6effe415ca2b0630270a76933b091b842d2c8c6e6f98456cdfb4f5503a492d2da4840b92957c7d36d747ea308402fc74fba632f808e71509fef8d95e1fe1b5aea315143ac51ae4ba009efa1bfb3fab26ce863ff0dee6ce22975a6d0164b7572be2c0f0267824161b9906c68bda677d06bf51ac21caabb683e52864edb5071965a4d589aee186ee44732df4deec67a86665dedce60e24c14a0b2fcdfb993ab8cef31204c7008f56136e253283a52d726ede26c355e72b10f20c8c64375b188c26fa65e1990918339dfd49818540f8d71b2d9f7be9acc584d7856de50a43a2d4025dd705123bc41d783d64d32f294743008f3f832b12611b6aa4b14440c9ebf9f3f33103e3f1eeb2f5f58da6ed5152b0dbdbbb524d5bf9cd3a1758ef512df88bccaa6838ac82455594d96817921209bd1d4e6daae14759635ae3e7bc8cc6dff934122565dee79ed3a3afd1aefc804cf187eb9d75cedf98be6fc7da2084ff3a5297f05d71eb9cae92c9450664983e14b023c13e7a648d3476724633f7ba1dfc4a104aa30b96ab7376cc261bf14bc792ed3ff2f99d57cafc4ea790c31c1e6ffeb1c918577fcda2beba984c30331d79caa57d4720e4e36b7b46eab8ac1773f7378c8e9446a2fe849ee65ab117b4983c4c9ee2d97e885e39b66c63751199a682669f2b5c63437427853ce68287e83992f72934a4761ec06f4d194d58c97725aee101792e948b5a1e214b9568e8a5a330105837396d536f7ebe64c53a638b0e4a2a4ee8fb41c5cf966e491c64151fe8f7acc42f269dfd56451bbc3696e6cda87ed387a2d847a5fe6eafdb5047f41783465e80b5faff8d32f517c606bd7a0ca400fb495077dfb33fe9d5d8e57a3e7d6b9e0ace8fc48ccbe183d20b727e4a66aed16b3264b7ccd11fd0fa6b4dca30747bbd0a6145b68d9b048dc07d75b4ff6a012d8d31804517346272bfb65f369adf075e1b25705f48585ea460d151f2a93197c4d0e6884e37475d178186eff18f27f1eb643e4be030787daa3b22db731605799f45a233b8532d79d517fadf9179e0760e3acd04fa29495198e8cf3806508371744bb61c56a93d2f5fb55087728b5d1c53215fdf9fe1fa62752f234821cd1000cbbc3742ad2af66c77a24c620ebbf8cc0721356c88673b72851b45ce8a491f638bdbaf11f62bb0391a5293e9ab7a05f6ffb1d416e26b62b86f8a1a80019c34e17f405273e6fee37f11b80dbb9464676df6c1c7250bda1d0f39b70ff04e599fab5419d768f80d295e26d976d4da95ec78b89e8880d262ae286934555f2576cd4b5bb63e736b2c6c82a351641d4763fbea5e1f052d1dbad603fb312f8e29672fde41b0a315ddc133e4fd472a265867316fac84f4a7c6b89bd4819df3dd13e93945ee358488eeebc723e110f748e76451cd1c7c75a53d55baf87623cf8ba2ad985064c003e55c69f6fc0053811b78396dfd4c19b90d4d3b9ca89aa6a0192389ff4453dfafe42642e07f015b79d46fe6655c4d5aaf10c135792012d415c17398527b32964c91dfdbeb52f7c201c8566282a25ab500539804fc2f8633afecb312afa4d8013b02bb6db580e9ab1f7368b73f64f1c7778bd14a6e523d867d382f1f62a18835bac266c199b36d72d374055e3287481848fe06f5636e79d3101dbb984e5b5c404150c878510cc844849d434d0a13a9dc6c3972f85f519a7968219754180ce5976f8cfcc0facfe9d41699cca6d2bde900307792a9a2b7c6f8b99870bf0612daeee9bc7497c87ccefcdbbe0d9864e6504f7b4b1679e054e46e86bc4841757f4a4dfccabc61b83db83c73062681b4e66b8a40533da4b89b5ce1a573b4a9d132ce22a1f7349498a42a118691985b7beab8922b80149ec08aba2426fcea756ff491ff9e5773feaf5e481db3a73b640e60a60f9b36cb292d843bc6fa0828e9e3f6fe00d166fcd5244be4d6bb1268003f02c627e0daf4a5d03aa00cf3414078b7fb21390a24a6d7b6e5f489e87be417eb79c2bda2332992341edea3315dcd24b1ce52f73a3f29c72e7dc10dccbb87c19f3e1d205723bc3b30b096d2c49629882e7953fc5053285677711998350c85feb20ecebcbc7b5719d02486e9c454f35c5226d7b0693884cbf7d9814ddd842e5d37bea1537fcc1f22c031a1244c0134cad3c0ac9ec2e667730c93a6488bde20343bc39e5f7b1a859275b36ed7baac7d465ff6971ea01e146199b5d287080deae6198db7c2da78bfd0691a322dfeaa8ad1915a103d2b0a6bebb2a1aba17d0e614c327c711794cbbd2ee7157217996654c3b47330a9e4f7a0b2153dd7ccd2724186d72010b70e1ea2997dcee284ffee9c674492e2760c072dd524d18629d16337a5c50555c049db5a1007d9ca1a4b6c0446931e001f4f821f04e52bd0d07b97c04fd71c83634ac24415e6a4b160ea7fde3776674f5823029171bc2a6bb6562d5d68fd2040db78319d96b8a50786d0541bf8a04a44897f233cf0dd4d975a5dd9b335e39a4f10be702de83a71bca15b992c6ca883fee2b44834702f98763", 0x1000, 0x5}, {&(0x7f0000000540)="d9d08c845dec6d4a70d1e6a13223831216afddc77eb70625f8785717753400438f6d78642b7c71960ae8c2f88cce0f8e46ca18f5f10784d38171ddbfc32efb7f1a99b8831745c309700326db55fe6cb8cba7de2513d756c9f51f51dcfe819ba1ffd710d12ac694d721f8d40871c22b9a552c2be42a33b3d97e07926983a1841fd350e0620a5ee6fdf05bd16cbd897aa66f4e427bdc9f97e4fe77db186c012b7391dab460aab3c8920f2dae89471a446c51d54da47977861cb8b7c7342801d3a3c8f202327b861ac6c276ef796a605642e595af02f09547cbd2ef002b46c076272f7f6cca8b5711fa", 0xe8, 0xee48}, {&(0x7f0000000640)="95fd8375c65fb7f795cd35abbaac5a4560660737520c67", 0x17, 0x1000}, {&(0x7f0000000680)="9ed6bf0ac5647ee4f421af011e4370fde27793381cba4e9395bea74d3a576ebf960001b0ebf90a", 0x27}, {&(0x7f00000006c0)="4afaa47dc6d9e71d0a9fe5c632f00c716a064807c71efb480ffe6ef8c109de99baa59dc359867e3a328cb770c918b164810412ead8f1174361f2ff9279b2b7d25a071783d3b6e231c557fb5df13a169db72623a5008721c68901b8072cb881", 0x5f, 0x1}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00a11f81398dbdbbac90115f4591b6f9c91bda293616328f6fde53803b474519e936fe535918741777de3bf5143ad5529247e509b41d5efa3f4e5658805aae2dc6f25ab073924c07d69626b55206c2a2e4907c4318003824fdb54a"]) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x9, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xf269, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='.', &(0x7f0000000100)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000280)='.', &(0x7f0000000500)='mslos\x00', 0x500c, &(0x7f0000000800)="cc06a60edc54d3a2b58d4577c2b737cd10537445f5b4b1fa9c4b01cb29b2750fcdd43329608d22f4c7b1ab") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000400)='teql0\x00') 03:39:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 03:39:38 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x3f000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:39 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x9, 0x1}, 0x2c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r1, 0x800452d3, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00']) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f00000001c0)=[r2, r3]) 03:39:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:39 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg(r0, &(0x7f0000003900)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000038c0)=[{&(0x7f0000000240)="16714da900a12816d40c443501f1a26a", 0x10}], 0x1, &(0x7f0000000280)}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x6680) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@loopback, @multicast1}, &(0x7f0000000080)=0xc) 03:39:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 553.557411] binder: 8257:8263 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 553.596899] binder: 8257:8267 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:39 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xa], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x197]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:39 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) open_by_handle_at(r0, &(0x7f00000003c0)={0xa, 0x1, "0109"}, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x11, r1, 0x1, 0x1, 0x6, @random="077d4bcb7117"}, 0x14) 03:39:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000480)="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") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='sessioWid\x00') setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xffffffffffff5815, 0x7, 0x9000}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f00000000c0), 0x1) 03:39:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 03:39:39 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x500000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 553.922469] binder: 8306:8310 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:39 executing program 7: mq_open(&(0x7f0000000080)='vboxnet0^+\'*{wlan0&vmnet0\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x7b}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x381d41, 0x0) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @local}, 0x10) mq_open(&(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000140)={0x3f, 0x8001, 0x4, 0x5, 0x7fff, 0x3, 0x9, 0x7}) 03:39:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf00000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) [ 553.994390] binder: 8306:8316 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000280)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0x100000, 0x4002, 0x4, 0x2, 0x5, 0x7, 0x2, 0x0, 0x5, 0x4, 0xffffffff, 0x64e9}, {0x5000, 0x4, 0xb, 0x0, 0xeeae, 0xae0, 0x87, 0xffff, 0x7ff, 0x8, 0x100, 0x9}, {0x7001, 0x10000, 0xe, 0xffff, 0x6, 0x100, 0x5, 0x4, 0x6, 0x0, 0x569f7976, 0xffffffff}, {0x2000, 0x3000, 0xa, 0x3, 0x3f, 0x4, 0xfffffffffffffe83, 0xa223, 0x7, 0x6, 0xffffffff}, {0x100000, 0x2, 0x0, 0x6, 0x6, 0x1, 0xa6, 0x1ed, 0x1, 0xfffffffffffffff7, 0x7fffffff, 0xe0}, {0x100000, 0x100000, 0x9, 0x9, 0x7fffffff, 0x9c0, 0x6, 0x2, 0x4, 0x80000000, 0x136b, 0x80000000}, {0x6000, 0x1000, 0xc, 0x7fff, 0x8c, 0x3, 0xffffffffffffffc0, 0xfffffffffffff001, 0x8, 0xffff800000000000, 0x6, 0x100}, {0x100000, 0x10f000, 0x4, 0x5, 0x8, 0x200, 0x0, 0x6, 0x8, 0x7, 0x9, 0x9}, {0x0, 0x6000}, {0xf000, 0x4000}, 0x60010000, 0x0, 0x1d005, 0x2000, 0x3, 0xd900, 0x0, [0x6, 0x80000000000002, 0x1f, 0x6f]}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000001c0)) 03:39:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="906300400000000010dd0ba470151bba000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:39 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x3, 0xffffffffe407d0e1, 0x10001]}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x6, 0x8}, 0xc) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7}, 0x7) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x1, 0x2) ftruncate(r3, 0x28200) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 03:39:39 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x200000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:39 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000008080000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffffffffffffffb, 0x1000}, &(0x7f0000000140)=0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=""/40, &(0x7f0000000340)=0x28) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000280)=0x8) [ 554.216983] binder: 8335:8342 unknown command 1073767312 03:39:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 554.279303] binder: 8335:8342 ioctl c0306201 20000300 returned -22 [ 554.309080] binder: 8335:8357 unknown command 1073767312 [ 554.322573] binder: 8335:8357 ioctl c0306201 20000300 returned -22 03:39:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x100000) [ 554.358792] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal 03:39:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 03:39:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="106308c00000000000000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:40 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xfffffffe], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x3e, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000000c0), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000100)=""/195}, 0x48) socket$inet6(0xa, 0x80000, 0xffffffffffffb1f7) [ 554.435862] REISERFS (device loop7): using ordered data mode [ 554.442094] reiserfs: using flush barriers 03:39:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff9e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x4806, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@loopback, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, r2, {0xffea, 0xf}, {0x8, 0xe}, {0xfff2, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x198) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x18, r3, 0xa0d, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000280)={'teql0\x00', {0x2, 0x4e23, @multicast1}}) [ 554.484273] REISERFS warning (device loop7): sh-458 journal_init_dev: cannot init journal device 'unknown-block(8,8)': -6 [ 554.495623] REISERFS warning (device loop7): sh-462 journal_init: unable to initialize journal device [ 554.506119] REISERFS warning (device loop7): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 554.541990] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 554.550950] REISERFS (device loop7): using ordered data mode [ 554.556809] reiserfs: using flush barriers [ 554.562449] REISERFS warning (device loop7): sh-458 journal_init_dev: cannot init journal device 'unknown-block(8,8)': -6 [ 554.573815] REISERFS warning (device loop7): sh-462 journal_init: unable to initialize journal device [ 554.585137] REISERFS warning (device loop7): sh-2022 reiserfs_fill_super: unable to initialize journal space 03:39:40 executing program 7: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'none'}}]}) r0 = socket$inet6(0xa, 0x401000000000001, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000002680)='./file0\x00', 0x400180, 0x100) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000002600)={&(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/221, 0xdd}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000001480)=""/131, 0x83}, {&(0x7f0000001540)=""/185, 0xb9}], 0x7, &(0x7f0000001600)=""/4096, 0x1000, 0xa041}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002640)={@mcast1, r2}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") 03:39:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe) [ 554.701875] binder: 8377:8381 unknown command -1073192176 [ 554.719959] binder: 8377:8381 ioctl c0306201 20000300 returned -22 [ 554.775844] binder: 8377:8393 unknown command -1073192176 [ 554.827412] binder: 8377:8393 ioctl c0306201 20000300 returned -22 03:39:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x9effffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:40 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x10], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7bcfc8dbcb273cba609c0d7cb92a4d92f537d743e73cd4802cb255085c908e7fc09a69dfe497edd23be09ea9131841d65ea9aaed5a3f611769558896866a42fabb819afe12405b464fd4b815150947c793b97b0ef7f2e04641b14461ff82ecc0d25cddf7a0ec9dc50d7b0d55ae45a42f0f269626b150754d8981f201d9a7d9a230c01684d455f54dcb3ae864447910597c244ac6b069d963b7a381561968faffb017f3a09f449cc18bc2ae5265bfb8ae014102ed47e3af2e9b9de395fe2c9c8f8fc51b63f7519b70e93b33d51c42e2e26cf6f031269b43720c5d3a3f2482f2164815ee12d13e99421fff5103195fa81520af5d22220a421498933208f54b7b7288fa5dd404c6b3b8c3c37962a3826cc9b1e0698972062bf70a7cff333669d43efd64c28948bc17b0ce5e8d6605928110"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:40 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02008100000000000000ff07000000000000000700000000000000000000000000000000000000000000000000000000000000dec31a2d4000000000000055aa", 0x40, 0x1c0}]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) getpgid(0x0) r1 = getpgid(0x0) r2 = getpgid(r1) socket$inet6(0xa, 0x2, 0x8e3) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0xf9, 0x120000000000000, 0x7fff, 0x7f, 0x7f, 0x5}) [ 554.926544] hfs: unable to load iocharset "none" [ 554.931979] hfs: unable to parse mount options 03:39:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) syslog(0x9, &(0x7f0000000040)=""/128, 0x80) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00005e6000)=0xffffffffffffff91, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) recvmmsg(r1, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x61, 0x2041, 0x0) 03:39:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) 03:39:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 03:39:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 555.067266] binder: 8425:8428 unknown command -607596677 [ 555.093606] binder: 8425:8428 ioctl c0306201 20000300 returned -22 [ 555.106924] hfs: unable to load iocharset "none" [ 555.111909] hfs: unable to parse mount options 03:39:40 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x800000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 555.156459] binder: 8425:8437 unknown command -607596677 [ 555.185592] loop6: p1 [ 555.185592] p1: [ 555.191700] loop6: partition table partially beyond EOD, truncated 03:39:40 executing program 7: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f0000000080)='./file0//ile0\x00', 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffffe) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) ftruncate(r3, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) 03:39:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308ea00000000d72c9002c80a950742000000000000000000000000"], 0x0, 0x0, &(0x7f0000000240)}) [ 555.205802] binder: 8425:8437 ioctl c0306201 20000300 returned -22 [ 555.213868] loop6: p1 size 2047 extends beyond EOD, truncated [ 555.233984] loop6: p5 size 2047 extends beyond EOD, truncated [ 555.375582] loop6: p1 [ 555.375582] p1: [ 555.381168] loop6: partition table partially beyond EOD, truncated 03:39:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x7, 0x8, 0x1, 0x0, 0xe78, 0x40, 0x0, 0x8bd5, 0x6, 0x1000, 0x2, 0x0, 0x1, 0x400, 0x6, 0x6, 0x200, 0x100000000, 0x0, 0x9, 0xffffffffffffffcd, 0x3, 0x6, 0xd86d, 0x2, 0x3, 0x7, 0x10001, 0x88b4, 0x49f27e38, 0x6, 0x2, 0x79, 0x800, 0x4, 0x0, 0x800, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x14410, 0x200020000000, 0x5e, 0x7, 0x7, 0x401, 0x1f}, r1, 0x0, r0, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000365fdd07000000000000ffff0000000000000000000000000200010000000000000007000000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x70}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) write$P9_RSTAT(r3, &(0x7f0000000100)={0x70, 0x7d, 0x1, {0x0, 0x69, 0x3, 0x5ec, {0xa, 0x2, 0x7}, 0x82000000, 0x3ff, 0x4, 0x4, 0x15, 'keyring+mime_typeself', 0x1a, ')self]posix_acl_accessself', 0x7, ',ppp0$\''}}, 0x70) 03:39:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 555.430642] binder: 8469:8475 unknown command -368549104 03:39:41 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x900000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x900) [ 555.479701] binder: 8469:8475 ioctl c0306201 20000300 returned -22 [ 555.490956] loop6: p1 size 2047 extends beyond EOD, truncated [ 555.517623] loop6: p5 size 2047 extends beyond EOD, truncated 03:39:41 executing program 7: syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000400)='./file0\x00', 0x5, 0x9, &(0x7f0000001a00)=[{&(0x7f0000000440)="1897a5860297c3ad9949b7edf0163ddd77deb2193aac434876695742d09a416c7ad8", 0x22, 0x40000000000000}, {&(0x7f0000000980)="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", 0x1000, 0x9}, {&(0x7f0000000640)="81d5f869d710fd84e0fac870293f55741b17d7b45a57595ed710b99d662669932ba2fe1effa9f53169ac7e6d5fcfebd4bdeb9ff705e808bea9efcc2efae640ee58c01e334761a5547b4f8e2a01c1557a59e9d54178855199be8981c244483b29bca8c7fb8b15a3dcfa1ce4cbefb24d1a86aad929e5561e", 0x77, 0x1000}, {&(0x7f00000004c0)="7502", 0x2, 0x5}, {&(0x7f0000000740)="018e53457aa255732e00e89c0a492b8935a934b26126e7c46ccf81da884813c4652f77748b2c93b3a37b20a1dd94082d8512504660354a96bcd40ae962c6a5a557c59bf64aee42af34fcdf30c5c62423338ca7", 0x53, 0x8}, {&(0x7f00000007c0)="9bc83f73120a0fb7b600e6097d9213b9829e58eb1daaca534d86593110d63049fa9444f12b20b4442c2cb5", 0x2b, 0x3}, {&(0x7f0000000800)="d765bbf6db87479db5b9a2e7f992f0915a4a8f0d15bb6f2d3fa5aa4bf8822674a97a35ad13cf2131dffe78e4eccca7487b436cc51431fc1e7e8bae8ab634cac38475d9c8b7a1b9168d322d727602afc208acd83fc4b07e23c67e06f999dd0e3dfa08d34dfc10944b0921bbd4d79a97be3052a828a4c7c821420f828b372571f44f289f03d5b00e0972eb4a045de409d9376dd7f12b026fb54a0c63dd718c24d739c5a01a54eade9cc3", 0xa9, 0xfff}, {&(0x7f00000008c0), 0x0, 0x9}, {&(0x7f0000001980)="73be1c582205997e83adf0d2b8898c401d48466963afa34a13b2a32e6d17ac98b36847949ef096ff630f2b777a788c73d5cfe8a0c81c4e9786eb1c4f53c19c3f7ecd0838e7f9ea1368084d73603f2748f163cffbd9338131baef0a3e8aaa33c8038f2002a7a7", 0x66, 0x6}], 0x1000, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERRORu(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="130000000701000600"], 0x9) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x70100) write$P9_RREADDIR(r1, &(0x7f0000000540)={0xe4, 0x29, 0x1, {0x0, [{{0x40, 0x1, 0x1}, 0x2, 0x8001, 0x7, './file0'}, {{0x88, 0x4, 0x6}, 0xaf, 0xe4, 0x7, './file0'}, {{0xc0, 0x1, 0x2}, 0x10001, 0x5000000, 0x7, './file0'}, {{0x80, 0x0, 0x4}, 0x7248, 0x3, 0x7, './file0'}, {{0x9, 0x4, 0x3}, 0x80000000, 0x9, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x4, 0x1, 0x7, './file0'}, {{0x8}, 0x0, 0x0, 0x7, './file0'}]}}, 0xe4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2adb89698ae4b90bfaa2b45c0cf1ef482a7b965189f3c4b00f926da4000f4e843a43a1"]) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x161000) ioctl$TCSETA(r2, 0x5406, &(0x7f00000002c0)={0x1, 0x100000000, 0x3f, 0x3, 0xffffffffffff0a48, 0x65, 0x7e0, 0x401, 0x0, 0x80000001}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 03:39:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 03:39:41 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) semget(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000480)=""/4096) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r1) init_module(&(0x7f0000000000)='vfat\x00', 0x5, &(0x7f0000000080)='vfat\x00') syz_mount_image$vfat(&(0x7f0000001800)='vfat\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0xaaaaaaaaaaaab46, &(0x7f0000000440)=[{&(0x7f0000000380), 0xffffffffffffffb6}], 0x0, &(0x7f00000000c0)=ANY=[]) lseek(r1, 0x0, 0x4) 03:39:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000240)}) [ 555.745985] 9pnet: Insufficient options for proto=fd 03:39:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff7f]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x6f, &(0x7f0000000080)=0x3, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x840, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000100)=""/63) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @rand_addr=0x4}}, 0x3bd, 0x5}, &(0x7f0000000280)=0x90) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x0, 0x3ca3, 0x0, 0x0, "3ca35e12bec5ad41e4057ecc2ca6ae4607108cb75829cf8b3c5e6809aee558b2"}) 03:39:41 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x1000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 555.836657] binder: 8510:8517 unknown command 664030918 [ 555.893859] binder: 8510:8517 ioctl c0306201 20000300 returned -22 [ 555.931688] 9pnet: Insufficient options for proto=fd 03:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x16) [ 555.963714] binder: 8510:8517 unknown command 664030918 [ 555.999306] binder: 8510:8517 ioctl c0306201 20000300 returned -22 03:39:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000071c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) move_pages(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000140)=[0x1, 0x8], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40) sendmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)='<', 0x1}], 0x1, &(0x7f0000001040)}}, {{&(0x7f0000002ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f40)}], 0x1, &(0x7f0000003200)}}], 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) 03:39:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) r2 = socket$inet6(0xa, 0x1000000010002, 0xfffffffffffffffc) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) close(r5) close(r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)={r6, 0x8a, 0xc1, "56ee1e71b92ea761ff2ec48d7d55539f95d8fef7c253b479abd6b5c0e5598cc5cb62529e8df26c47ac6e7a9072cd25be90a8c64b7b4823be1e179996ced2c42938d1cf7592fb44591a0e58604b91b5fac6b4ec1037f0d4a310f9429cd2dc46a256db22f000a663755cf12f91f461815eca1a1dacebe4dd188594e68fd75001cd1f945a7e59324a9caeb68839a1301888029cb0aa7e723b0f07ce202f048cacf934cec80c5c7e2b775809e8f628c57a7a96e0b6419c2632491e6411a285b2a8d4a2"}, 0xc9) 03:39:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x4]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, &(0x7f0000000240)}) 03:39:41 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xfcffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) 03:39:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffff0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xbab}, 0xb) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000a5d000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:39:41 executing program 7: r0 = userfaultfd(0x80800) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 03:39:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0), 0x1) r1 = socket(0xd, 0x1, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 556.573169] binder: 8582:8591 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 556.616345] binder: 8582:8594 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff7f00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x4) 03:39:42 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x300], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r2, 0x1c, 0x0, @ib={0x1b, 0x7fff, 0x40, {"9beffb2afd1d590440a03e8f235cc502"}, 0x8, 0x6, 0x1f}}}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x117, 0xf}}, 0x20) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) dup3(r0, r5, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs, 0x6e) 03:39:42 executing program 7: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x7}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x13f}}, 0x20) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101440, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x57, 0x1c, 0x1, r2}) 03:39:42 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x9}, &(0x7f00000002c0)=0x8) prctl$setendian(0x14, 0x1) msgget$private(0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="106308440000da0000fffb00"], 0xffffffffffffff91, 0x0, &(0x7f0000000240)}) r4 = dup2(0xffffffffffffff9c, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2, 0x10000}) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) 03:39:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000001c0), 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80880, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x1f, 0xb24f, 0x5f5, 0x80000001, 0x5, 0x1}) accept$inet6(r1, 0x0, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x3ff, 0x1000, 0x1, 0x3, 0x3, 0x8, 0x12c, 0x40, 0xdb, 0x8000, 0x8, 0x38, 0x2, 0x2, 0x1, 0x20}, [{0x6474e557, 0x5, 0x7, 0x8731, 0x8, 0x8, 0x4, 0x1ff}, {0x3, 0x3, 0x3, 0x76, 0x1, 0x2, 0x5, 0x3ff}], "5ce0908f3ab782b5ff16a02ffecd4b1f873cc7bf89a7a7b3265716e7b11255b116442a0b76b0cd134e3bf427f8b994786fad1eb2c99de31ab61c96fb71fd18133ffaf76d36d6bfac3e295771b33c37999ec6c8", [[], [], [], [], [], [], []]}, 0x803) 03:39:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x5460, 0x0) 03:39:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:42 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x3bd, &(0x7f0000000400)=""/187, 0x0, 0x0, [], 0x0, 0xf}, 0x48) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x105000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x989680}, 0x0, 0x33ac}) [ 556.864092] binder: 8617:8622 unknown command 1141400336 03:39:42 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x4b21a8bd0c], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:42 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x200000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x81, 0x8000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8, 0x20}, &(0x7f0000000180)=0xc) [ 556.907940] binder: 8617:8622 ioctl c0306201 20000300 returned -22 03:39:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xfee00000) 03:39:42 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00') getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x2f07, @ipv4={[], [], @local}, 0x1}}, 0x0, 0x1, 0x6, 0x8001, 0x80}, &(0x7f0000000080)=0x98) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000400)=r3) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x7, 0x0, 0x4, 0x5}, &(0x7f00000002c0)=0x14) sendfile(r0, r1, &(0x7f0000000340), 0x800009) 03:39:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@local, @multicast2}, &(0x7f0000000140)=0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000240)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 556.964261] binder: 8617:8622 unknown command 1141400336 [ 556.985690] binder: 8617:8622 ioctl c0306201 20000300 returned -22 03:39:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 03:39:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x3000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x9) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/60, &(0x7f0000000100)=0x3c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="004600002800009078ac141400ac1423bb0e0079780010000000000000000000000000000000000000000000000000debf70ac000000"], &(0x7f0000000040)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000200)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x42, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000180)=r2) 03:39:42 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0xb3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/189, 0x2) write(r1, &(0x7f0000000000)="36afe834bf5a79c7458b205a168fd984f11badd894", 0x15) [ 557.219223] binder: 8653:8658 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:42 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9f, 0x2000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x344, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, [], {@ipv6={0x86dd, {0x8, 0x6, "d2368f", 0x30e, 0x3f, 0x1, @loopback, @local, {[@srh={0x84, 0x2, 0x4, 0x1, 0x400, 0x20, 0x38a, [@local]}, @hopopts={0x16, 0x39, [], [@calipso={0x7, 0x28, {0x80000001, 0x8, 0x9, 0xb7, [0x400, 0x15, 0xfffffffffffffbff, 0x10001]}}, @generic={0xf02, 0xaf, "2cc7677791d9464d863f2f417a789bcf443e15bfff36e8606c4458515b703be2c3e6012e12831069c76459e951eddd2f444cd7649c2da0ef1d0a2e3ef4d2712871aa0bc838b0aa44394e8821b7594a5f1a1422af7dbca3290168c21e621ac1266ddc0ca473d695a1a73839916d7cae6a5ecf45d4cbe18c8462d81ff31b53f12750bdbca9bd9afd18e1fc95f12edac00a186eb604cd3b40934bd52671a576de97d53ab7aa0fa6d0160fed24cdf66364"}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x48, {0x8, 0x10, 0x6, 0x6, [0x81, 0x3, 0x4, 0x6, 0x40, 0x5e41, 0xfffffffffffffff7, 0xff]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x7}, @generic={0xfffffffffffff71f, 0x8b, "bd1d239db574954cd267a3e362317fe4092b6f34640e8d9358017e16c5a4b52ad289ac1707e8f1c804906d27e8e105952e643b40ee482dae52168a865263744e9212fef5fb8caed9e61dac95cd321007946a7f55adada8bc6269cdb017770f4af0dc664c03beaee6781daacbcdce6682dd4d98bb1779317b1ca3e8a471800b1c47d46e75b3293709981b56"}]}, @fragment={0x0, 0x0, 0x1, 0x7f, 0x0, 0x8, 0x64}, @dstopts={0x6, 0x1e, [], [@enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4ccd, 0x0, [0x0, 0x8, 0xeb6, 0x27f7fa27, 0x100000000, 0x60000, 0x3]}}, @generic={0x800, 0x59, "d4217a60f6ca6a3eea9a2107529b6ea6d01ec7ed6d9653c07b9781ed53c2c4b1dfed5840d247f02e3ff9ba2a9475720d99f5e0e99ce863219e36bdebb96117fc2b068d17025c34ae8f5cab212b43ea8062782b373aeefac811"}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x48, {0x8961, 0x10, 0x6, 0x4358, [0x3, 0x4, 0xf4b5, 0x2, 0xdbb, 0x1000, 0x0, 0x74a]}}]}], @dccp={{0x4e23, 0x4e23, 0x4, 0x1, 0xfffffffffffff7ed, 0x0, 0x0, 0x4, 0x6, "dbf6de", 0x3, "050a30"}, "bc05e40fbfa4b35d061fe9101547"}}}}}}, &(0x7f0000000480)={0x0, 0x1, [0xb27, 0xe0e, 0x84d, 0xdd6]}) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xca5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 03:39:42 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x100000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x4000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) [ 557.285929] binder: 8653:8664 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 557.354829] IPVS: length: 60 != 8 [ 557.381951] IPVS: length: 60 != 8 03:39:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x1, 0x3}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640)=[0x78, 0x48, 0x30, 0x30, 0x40]}, 0x4a4}}, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, r1}], 0xffffffffffffff8d, 0x0, &(0x7f0000000440)="f4dce04ed50c92f79858c168dbe1b6cbfbadbc24c0c3d6ae942276590ccd5f37ca920250f4a119b7d00f9c6d4595e5e4ccd248edd24be5e02b46395967a94bc26a7db254d19c538c7ddb16e0933d340fb0808bd0bb15d0cbb0537a4656a18814100b4777d6705917e98a421302aad69056174b3557227c6856a2ee41eeb69c0772b2b6ac4120fd28ca7f9ea839622f040d3c97ef84694770d4d7c9c2c15903b27d012c6ac11fcddba9bb2065b28654599c0eaa3bf7e77abf5d169aa4d66f8f"}) 03:39:43 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e20, @multicast1}}) times(&(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0x4020aea5, &(0x7f00000001c0)) 03:39:43 executing program 2: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r1, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003500)="8fc6b92d3807b57f537c2a946907f7e2e92eba98be131e43c98f3040c5246fbe266ec63fbfb6d503a4d20894f27836c5f811e5baa3a8204060cda8a2915bc1b0e4cfb9401eea50a9d29a0576454c04ff8069dc10ed6e73941bed002dcd5fd3cda3dacd4aa1da1bbaf8a031cdc04e262fef", 0x71}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="28bf7841f6308401956c811916308244ed3c2474524f80fea1e5c9848133e5427ad19545e09dce490b85012574a972ce091d63f2ccafae71b987131bff4240881b8fbdd180edcfa41531e044bce26a6a5ae94d9bbc84f757d26b3a020b993bf0a061e74e01ad7bd93b916128ef19da4fbd2745b66c5769eafc6310f4e113786a99ab4e2422ccebbb8847551cf42f2487d7ee32e3419e", 0x96}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="26430e474edf24c90ed98761857a6d", 0xf}, {&(0x7f0000003440)="840e0c320f50e849c293c4f636e198e28287d1bb48198f90186a769aa1e44641cefe1446ca9a0a610baae86d9c6d642e75e2beddddb6b7dfd7723887bda796baf69147a434c9b4e68894712aad2a2b7dbb9dae7d8b26e5e5683c914fb3864e281ea47425a7116db757edf4e9b52ca4ef72c6aba1199aed8df0882eede144fb1c81e8a006d1fe8d0de29193e8e4d0ef986f336aef8938228b49640b438562079d5354d42be9a16505a2c052b958f3b2095614b63a27bbfe0f99f9aa4b044c21", 0xbf}, {&(0x7f0000003300)="35a79d60db0a17bd2d607f8051ff2c2bfa7dd61caeb76f646986400310936edacc6971692f1acde6c8c33a2b48a84be9597f", 0x32}], 0x8, &(0x7f0000000040)}, 0x80}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x0, &(0x7f0000003580)=[{0xc8, 0x102, 0x9, "04c205abf3db4c3765a787ec2801e8a49231f2b98c51c9227d8c739620b8d80263bafde599633f2c6c50e19f74c605759c6338a734e058e22daef6557ac9504dc2a4f8279fa5c5abdaa9f36d562a7748e8d4b6afc977d10d1616d49b38d17fb8d191d349761726453055c094396b205610b4c873d575fd9fccc6860b73e91c81af7640888ef026ee40cfe12036c3d545723dd5c7885b6ecd7e6b826afa3415039b5055dde0611b8b6db24d77f9d94e9e28345586df91aa49"}], 0xc8}}], 0x2, 0x3) 03:39:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 03:39:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xa8040, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='{\x00', &(0x7f0000000200)='6\x00'], &(0x7f0000000440)=[&(0x7f0000000280)='/proc/self/net/pfkey\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)=')\x00', &(0x7f0000000340)=':vmnet1vboxnet1[\x00', &(0x7f0000000380)='/proc/self/net/pfkey\x00', &(0x7f00000003c0)='#\x00', &(0x7f0000000400)='/proc/self/net/pfkey\x00'], 0x1900) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 03:39:43 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x9effffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 03:39:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:43 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000006) r1 = dup(r0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) ioctl$TIOCSBRK(r1, 0x40044591) write$evdev(r0, &(0x7f000004d000), 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x50912, r1, 0x180000000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/67) 03:39:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xa88a, 0x2003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x35, 0xb, 0x17, 0x11, 0x7, 0x7f, 0x3, 0x5c, 0xffffffffffffffff}}) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=';', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd7) 03:39:43 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x400000000303840) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) syz_open_dev$amidi(&(0x7f00000017c0)='/dev/amidi#\x00', 0x8000, 0x101101) sendmsg$xdp(r0, &(0x7f00000016c0)={&(0x7f00000000c0)={0x2c, 0x1, r1, 0x11}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="273ce31cd17d6807e44b0be708d0243e2eb8e3418e924786e00f2d20d2e6d7b06e2093e9a6f16ac220bdaab5c651f238bc19d67c5cc613e03fe3c6e7399fbc92e86e6c7146642d1612c8071286708229ca91aeee4143aa4c37003f9fc1ca801e20a7197f97b15fb589de664546e5315a8c9d2d563207cbd982bfaccc4865699dfb6859a2560d5c5fcdb3b6a024f1b56b8ea1dfbe575e3a829eec", 0x9a}, {&(0x7f00000011c0)="d2f8560067db1ace06686d12233b0c077337685a8ef4f6ff26f85e46587bd12eb747bcf6a1973439d4314c6a8d7f8180f6ce0566c5ddd636704e4f9889ead754ec08ec3542503280932543cf628eb604a60bfcc653d5df16519c64f0e1d0e8ce4091a0fdb962ba3ca340cf0557764a7bdd80307d670a7699196b8f3629deaf", 0x7f}, {&(0x7f0000001240)="a51df5f9da8171f5150309b3a3bb55d7092a4e39068abdbeccf5f7a06146bca493e2defec11387ab30d507b128df3a654bd33078b7fd51c28af6722a6459151affb8125e67d6d75f9e40474e06cad6949df108a6c534dff928647911a9943b21545a8c7480b76078e230a4c2401d5114dfc42396e5a1140aa4dd2e34a4c35ae0e842581bea7cf5214aaf70cc5480bfb7b0fab0cfaa872dc6b0b72be7ec64", 0x9e}, {&(0x7f0000001300)="37bfd0512433a214c614b18670d3464a6f73679c91e5684ed7525b80c32486ea1719773d3be1a3c791194a2d3763c27a7294460b0c8f3e04c10cd31222fa01ebc9bfaff1cabc45ec715d85c4ce1ae463a822cab4994df8e6e1808b0b013e23a5a411556573a6d8ccb269e389d1f0957c57c696bfbb05c5f2c0c0489a1b3be8f1618a4662d16e7fd3f1dd13a4199fbaf5c8130e00a215c7952d40ac478c", 0x9d}, {&(0x7f00000013c0)="1db5e6fa6c5bd3cfcf2a91dabe354b61e53f3de7cb42a86469a62420567b269dbc", 0x21}, {&(0x7f0000001400)="5f2939aedbd163eb8437bb5e5a8d138d17a54afd14268bc37087882756f1d071ac920357e77837bbeff63cb749ca63120ceacad8be38cb97e7710cf4418938ce1b58e82a1ede2565400a4d32aa", 0x4d}, {&(0x7f0000001480)="924c6d7f7a65aae0a09670323c1bacb40d6fcff5343c75aa37200e37634977a083a8191cfa39010113b83769b735bbd172fb2226da95a671d4300f1f2a6d3854234ea3e7cae23e4bb8b50195fcd12c209ec361e9d22229334b0e0a8d8134f2ab0ad6323baa17261b4af3ce6125dc9e698c09e6f13c99ea368f22d6501fe2f3ed28de1c42e8bf1b37e2bee48de7df4b95c5cc71badeb807643398229107bda24d324d05e3f5ed3a5e61bbb86dceea07023436c24cb39e7a6dafd8c312d1fea7e7b98765b3f66da7c65b8be57d7803", 0xce}, {&(0x7f0000001580)="f28bd9b9d1a844fc93749967c38da1c501ea638f5419726ea9e5544f52d24983757074c0a1375d7812e5ed3ce388df7b4174e08cc82347439f77ea9f8953ffea5a06cd25dff348da8462d78e8450fa70d7a45470093ee052d86bc4d2924432baf89e9296121b83b172e00cb7286fe5b6", 0x70}], 0x9, 0x0, 0x0, 0x4000}, 0x8080) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001800)={0x0, 0x10, 0x30}, &(0x7f0000001840)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001880)={r2, @in6={{0xa, 0x4e23, 0x3ff, @local}}, 0x81, 0x7fff, 0x7fffffff, 0x2, 0x90}, 0x98) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000001700)=""/137) connect$unix(r3, &(0x7f0000665ff4)=@file={0x0, "e91f7189591e9233614b00"}, 0x0) 03:39:43 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x93, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x100000000, 0x20, 0x7, 0xfffffffffffff801}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x8f9, 0x200, 0x7, 0x1, 0x1, 0xfffffffffffffff8, 0x3, r2}, &(0x7f0000000200)=0x20) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000000002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x8}, &(0x7f0000000340)=0x8) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/202) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000002c0)=0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r3, 0x80, 0x10, 0x116, 0x9}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r4, 0xc2, 0x10}, &(0x7f00000003c0)=0xc) 03:39:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x8e09]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:43 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xf0ffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:43 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x622000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xfff, 0x800, 0xffffffff80000001, 0x7, 0x4, 0x80, 0x3, 0x3, 0xcc14, 0x20, 0x401, 0x2}) 03:39:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 03:39:43 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x240040) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x6}}, 0x6, 0x8}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xffffffffffffc3f0, 0x4, 0xa, 0x2, 0x3, 0x9, 0x3abd, 0x100000000, r1}, &(0x7f0000000180)=0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10630840000d0475c3000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x5421, 0x0) 03:39:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xa928, 0xccb, 0x6, 0x7fff}, {0x20, 0x200000000, 0x1}, {0x0, 0x8000, 0x0, 0x401}, {0x3, 0xffffffffffff25fc, 0x5, 0x1}, {0x9, 0xd9, 0x5, 0xb17}, {0x2, 0x1, 0x2}, {0x81, 0x3f, 0x2a607b97, 0x7}]}, 0x10) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) 03:39:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x98e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:43 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200082, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0xc) 03:39:43 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x3f00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:43 executing program 6: timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) socketpair(0x8, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x1, 0xbc}) 03:39:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x9) 03:39:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000004002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0x6, &(0x7f00000000c0)="9ff32cda6aad8f689a8732c7d63349f916678c010050ca39067f0b4b0bebffe476216c1d69a7ac5882769b42cfa87c1c5da744c6e2696a544ae71b98e3ed00f8b2a7b4d1da2ad1c933c6ab9ea7084f1e5896374493f5ed3c33be49e96d7162ef89fb4e0e57308a83c7cb319c9d0335798a0cd0b33d650c4ddf72bbf89de1e166df72c12ed3bff00bd6b12f2719c1703e8a5fcf013f0072bbc620ea2ebe3c89d09e6b2632c16338e1dcf8e496facc1b95a6586b89d5d36ac3e3ddea97104cb284a0b4ced780e52d61fddcee5e8c9a12e1eeaf88104a5f41944f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockname$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) bind$xdp(r1, &(0x7f0000000a40)={0x2c, 0x7, r3, 0x25, 0xffffffffffffff9c}, 0x10) fsync(r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats={0x10}}) close(r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0xfffffffffffffbff, 0x8, 0x1, 0x7ff, r4}, &(0x7f00000002c0)=0x10) close(r1) 03:39:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xbfb, 0x80, 0x40af, 0x5, 0x8, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x1}}, 0x7883, 0x4, 0x7, 0xfff, 0x9}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) ioctl$VHOST_SET_VRING_KICK(r0, 0x330f, &(0x7f0000000240)) 03:39:44 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, &(0x7f0000000180), 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001900)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x10, &(0x7f0000000040)=@raw=[@alu={0x7, 0x4, 0xa, 0x3, 0x5, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x0, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0xa, 0x1, 0x0, 0x30, 0x8}, @jmp={0x5, 0x5, 0x1, 0x7, 0x5, 0xfffffffffffffff0, 0x4}, @ldst={0x1, 0x3, 0x0, 0x3, 0x7, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x7, 0x3, 0xd, 0x2, 0x4}, @call={0x85, 0x0, 0x0, 0x43}, @ldst={0x0, 0x1, 0x3, 0x0, 0x5, 0xfffffffffffffff8, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x17e, 0x4e, &(0x7f0000000100)=""/78, 0x41000, 0x1, [], r2, 0x7}, 0x48) 03:39:44 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xf0ffffffffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x19) 03:39:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '/dev/binder#\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x2) [ 558.515319] binder: 8785:8788 BC_DEAD_BINDER_DONE 000000c375040d00 not found [ 558.549910] binder: 8785:8788 BC_DEAD_BINDER_DONE 000000c375040d00 not found 03:39:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 03:39:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:44 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x3], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:44 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2040, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xe, "9a9ba42a1beee173c692a17cee96"}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0xffffffff00000000, 0x800, 0x6, 0xf13, 0x2000000000, 0x800, 0x401, {r3, @in6={{0xa, 0x4e21, 0x10000, @empty, 0x9}}, 0x1ff, 0x1ff, 0x3, 0x5184}}, &(0x7f0000000280)=0xb0) [ 558.745124] binder: 8807:8814 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 558.764907] binder: 8807:8818 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/70) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000005) clock_gettime(0x20000000000, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x1}], 0x1, &(0x7f0000000140)={0x0, r2+10000000}, &(0x7f0000000180), 0x8) rmdir(&(0x7f0000000040)='./file0\x00') r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(r3, &(0x7f0000000340)=@ethernet, &(0x7f0000000100)=0x80) 03:39:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000a061f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x9) 03:39:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 03:39:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e24}}}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x80, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000340)={0x7, 0xf7, "eb8761b8fc5b9a37093829940dce48d0f2275359c22b24fe156d8ab28f53f2669cf0568534f9f611027af65539f8994a1d373ac2f199c6d370af8272976318acbfa6100b03016823983553d92d0e3457d8ead188b441888386e346ccc4b2791a0992e06805fb826a1ef4aef90369eda26eacadfdd29aff36bc8ff616a0b76d574979f880b4a028bd6c028de9e79e001b19e09fd07f070b5037c33386e21489a73ae9f2a995eb55416f19cf9375864fbd4b4b65237d201a0472ddde31c0e9f35c171d6f040add8a5967de35be9e4a1782eea5e3daf53e62515df6f9f12dbeed872f2aee295985f6f04aab21834acda7ae674218c721e6b7"}) 03:39:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 559.026600] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 559.033991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 03:39:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket(0x400000000001f, 0x3, 0x2) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x23, 0x4) socket(0x2, 0xa, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) 03:39:44 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xf00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 559.070908] binder: 8846:8850 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 03:39:44 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='u\x00', 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x8001, 0x3, 0x5, 0x7}, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = msgget$private(0x0, 0x2) msgrcv(r2, &(0x7f0000000140)={0x0, ""/98}, 0x6a, 0x3, 0x1800) ioctl(r1, 0x8912, &(0x7f0000000000)="700400b38a111974e8292b82ad15d3fc7a97461aa3cb09737eb564be4eac003e7365e90000000098a0bda3ab3f008e6bf40b4cfa7bff981745f331b8") r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x145) ioctl$int_in(r3, 0x800000800c5012, &(0x7f0000000040)) 03:39:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x8e090000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000006, 0x5) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85714070") pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000440)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x401, 0x30, 0x5, 0x6}, &(0x7f0000000280)=0x18) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) r3 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1ff) dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0xffffffff, 0x6, 0x94, 0x1000, r2}, &(0x7f0000000340)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x9e, &(0x7f00000002c0)="263abd030e98ff4dc870bd6688a8", &(0x7f00000001c0)=""/158, 0x13}, 0x28) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000003c0)) 03:39:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 03:39:44 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0xffffffffffff7fff, 0xa, 0x10000000000000, 0x200000000, 0x0}, &(0x7f00000000c0)=0x10) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/78) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8000, 0xdd2, 0xa3, r3}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6926, @empty, 0x3}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x8}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}], 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1063084000000000a2880000"], 0x0, 0x0, &(0x7f0000000240)}) [ 559.134778] binder: 8846:8850 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 559.154681] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 559.162083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 03:39:44 executing program 7: r0 = socket$inet(0x2, 0x805, 0x0) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)='G', 0x1}], 0x1, &(0x7f00000005c0)}}, {{&(0x7f0000003880)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003900)="37a4c49cd4cda3626ad297bcd77fac82062fab693a8dd6c36a970bb7fe3c71c785eee35f570d28675d7ffab33775c2e861c87cd6d6b3d229cda54a68eceb66b425f662f9d2eba32a602e1c60a0c31ad8d2b5476e18ebb3bfbe750e8ebddefdb28639c51979ab3593d314ba363679d4399fda7af3c9ce22b73cd0c25b72fffd58c9c2fda20c94b65dd6820e6c77a37dad2dad80294d439516204fcf3495473dd04855a7bb71a90381ab7b13935217c397241e3a737891c94ace780ab24c3bb6562b793b713624e0ed294444e429ad09c8ecddbcb7d68f4585340d0ee627941b93eb59b44f5314b755ef2b", 0xea}], 0x1, 0x0, 0x0, 0x50}, 0x1}, {{&(0x7f0000007980)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x80, &(0x7f0000008b80)=[{&(0x7f0000007a00)="36c9c17bd74b1c05572cd74c54183785b0afb0e0a4ac660aed4306314cac052fa79881fc93c135c74328c575d9444419b08fcc677d19278278fc8a8fb8da0c72b0521b7cb16648b4c935957368028687d5ec342586ff2ecf819fdc6ee20c1934c45b40541aef81a2b2931f0aee8209af11073fa596fe20c77cdf0da9", 0x7c}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0, 0x40000}, 0xffffffffffffffff}], 0x3, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x469}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0xc1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1f}, 0x8) 03:39:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x97010000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:45 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x1000000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x115, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, r2, 0x3c, 0x1, @in6={0xa, 0x4e21, 0x20, @mcast1, 0x9}}}, 0xa0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 03:39:45 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f00000001c0)="025cc80700145f8f764070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x20}}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c2c60d0469a6e10134f1dbaed4d6dcff2e79e99b5d541fdc549ce80938b9725f3d66a4fbc2ff294ea8a16f9dd8fa6fee970f1faab9f5f8526fc5"]) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000480)=""/216) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0xfffffffffffffffe, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e22, @rand_addr=0x6}, {0x2, 0x4e24, @broadcast}, 0x208, 0x83cf, 0xfffffffffffeffff, 0x3, 0x5, &(0x7f0000000340)='bpq0\x00', 0x5, 0x3, 0x9}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x8001) 03:39:45 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) finit_module(r2, &(0x7f0000000100)='\x00', 0x1) r3 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1) ioctl$TIOCCBRK(r1, 0x5428) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="92b240bc3546673335de6a8f0e881e8aebb084b005d22a0bf7d3134ee7e97cc9dfbd7bdf17c17d511005fe8f07cad1f739bf1ff7b4ce8f7f1d542d455dd5bc1816ee950e5717c08ae41fd03cfbb92eaba5e94817f5b77d337c6279ba6c9aa6845ec2f7768b049bbd118a78c460ae30ddc4d1d691eac10193ba208a363cfc6372342383e82a3a56e9b9487a0e99374e23386f2ed7c0097377ca664fc5d479066384c7b53ec6f9c9b83998280c2a043afb131a409e90f081359dc355cfbfc3682441d898bbb532ca8a46aa577324b2c2f1d45d64937fb4f227e0117c340f3284e6c1079213e6360bd0cad9b62dac6498b7da1e45b5befebab934041ceb2cf51f5d1946f223e8cf7e60c3073f9cf35f49d6dbeb6ef08c38dd8ec764e1c7a8f53f06bd75ca82d2b703f72acd8326b4cce9d6c0a0a6f0a993a1f6e6ad6db3bca25a6ce21833cf11e9291195de3902d844a3fa0f9eea6885c513843817c8e155a240820e52018caceea324a2342906048830a7b2e216fa99284b9e5bfadda5d98967b7f9cdc60b1aa57345c0032b02afbaa252432f5b657647e1411365a0a375991db2de40f0706b3b026bc771498294e92f8b4febc55b226b262cf28a4236ec51d30d8f4107333956170bf0d8a8ffc9a65f0012085d842c9525741bd6618027ab460605bd3cfa4064dddc890f99a03d5e348a44665f6f2674dd98685f849c022ff48350c4bc6c0cf65455a2cbdf65e7093ad97b02cdcf5053ce8e489bcf30b3f3d190110d18b463675c02e0ff4f96b2e920635030683e57d4cb6ee65714a1f41119ee96bb69819d43d6ab26a5bfc0741a309dd074ce1e32421b6ee740c9642e4f8536ad505a20aeecf84863a3a7d669742d2b329303065fd7fa9bf8b68311f0815110642dc12ebc17795ba45989e570ab80a17718c47bd9a9249199ed4988d86cd2b840d93db27c37d1c660e4a29b5ca445c29c2657e528e96e7ecd412bb61c3b6d8e4e4661505fbe2838b76b4ea2e41d2f97de65d2f1f53bead22c7b0fe5fb2d19932495f088be827edebc95e4fbb875cf7e763494fc04b3dba843d9d46d1943c1b851faa42568f02d1631916bafa13d2b079d90624c5c8e2bf219f79a9f28502d7bb214bd83021bdd1538a00ef4e375e5a6ed75a09768568e3d135d335ec936d0e16ae3444e7562a595489d84c1068dc8f30cdc71287f57fd0ab04290ebb693784ae3c297b6eeb1a2df7527ddbcc3772561221c40e7588c7bc0ac446a4fcba97aeba0fd15d5bd63cf24697bdd37ddda5712b00b1e6bc25d0d6009110c4587ca1863b9aae8d56403baba6fd3f021cd7c66e2562b42c27890bb0ade28c5f83e9c2654159db304d3cb0e11b3f648303e4de220706541fb78aa5c83329411282c4cd42865a570ec966880aad6587ebe9f9d805cc280fa67cfa0c392445c385a94d528adbe66a4ff38071fa3198c5b695749cf11a41656c7918f1d1fa074c75700744aba48a4c49ba374991ccbc1f66445875040830f98e9182790f8ec9a2135a0297cea632a70e1fc4632184cacfd71bcfdc01547ca526ac252fb0ef5cc3987f0fb1019b8c9487e1fd4ad9fd68fa777f4f06cf44cb191e709bd3fea7a455791b09507366e3ad0a44eb58e5bbffcdb1d39eb0ccb1c083b6daa89d1b57b7d1dd148f7c8edce1a8cbbae98093405c8d28060b868e8d788c91b178072a2fa39371e7052b21332b14bf1af70d91ead85ff2f6c6bc859e718a313dbce6706c8360738b18f5e474e3293fd13f20600ddbb7a81d3aded4c4129204a96bbf91a981fe1562a7256c036ff33779ea1662476e6f895feda97c4d4164ccce9a786ece4454278a4c4d71d580566b585b9c7d48bef17ac74300c28201b96b9d78e47c698daa6f2925e1b75d57497566c96064c8dd096d9ab6fa7f31ef7267595d8ee75f1201a17b57eb61110ecf0ba5aef692d9f607cdac41c02aeaa1a16a50c4bc7c697712ed0c7226c1e080a349303e6d3788a89393a07953bf5ac0fd238faddf3a2b9f35aa4530acd77ae6057b1cf4f1f1953003e245e11ebd5c93f430c13aca3b97696b48914d9024bab6e3fb8ccb95fe7c9d8f5fb9596b4d42f7398a37d2a31856318d5cbd9e7576856fcee6176aaf2d082a66de51208a20f536c9d565a20530f12ea01014cec11a7f72aff854e507569ed8841aed29154adeb78c2ab085aab444d3cde3732252ead61881a2098f8b93ae32d7580c687e448839901df60e23df9699c1743f9495871ce91082d2257381e1e1699459012bbddf5d0dc66f62f284aa9c62b2baed31c6659c3f75e7db47b08014d8a7160848f5a2866b38149780f0aa167b87c4f0fd64b536fb6ba1aa66892888ed674581862f02da1f34cbb93dfbf13abbed96383809f1f1cf1ce7e2df53f4eb76417a2141f144201cb1903cb5d14e68c872f1f6f2aa39e12be62e1c04c7a481d0da97981cd4ffd3d5649760ca4da2d2069a6919dcc230fff17e7590c86f1823e350eb6e5b37371926998ea48606e4e9f78b6dddaf67029df284cef645558d8e46a61b9b4d5e82fc1451605c0f26fa225a7b20085a4875f376a711ce17859ca4c6c4ba3fa7e15c5059bf6eefffe8171eb65271024cf337a169614d266e21ab5e31debf1e7969a9aeedb9ee81c71d13eff6cc4b8e6d3f1dd29477b075d549f31a25b29054698f17ca690e00503a1604d43c52e3638a2e8608f1c393b114c9af9b8142dad5b38f766e9298d48616d006d2e8069d3738e3864c5f75fe3c1e06c90aa856a480b779f96469286a76ca3e66069ce199658262f0132bb26096cf8fc7562674c4c211dd5beb4b7cbaea887e3eb77eed5cbe69fd65931d1592f4a852f63675b703bcd937833e13812c54cae3fe4dce38918845d61d3c84339e80962b36e8dc3d7c7c9afbfb06dec3bf8931dcbee8c6d7f3abc0080576e7a12d064a8bc4797213c48b559d4faf8dae79c4e67dc729f174533fa63d512b46612a1e0d08128dfd1782fb233229f186df1352576f504b6e46ad7028e8ec49a732aef5d855f5a7fae3f550c94bf6a9fd450d5b3a2a1dc10da8e4f33f3f97996c628d8be3d848dc3c48cb61a802581626e7d1b780bb53610fc0d7705cc06886f174be4817f8b160674107b8f518408402bee8f0c0b8933bcd5333e6571d0628da40f3a2275a433eadb2f9e26b34e96b5b4059e18779a642edfb75c236d7044746ed171163b1071c1ec46ee2ed6cd774d7e8cec0f0999db2240bef4bb6cb29524b0b63fba8cfdf749f4859d3899a0639ee24705451d4940f6bde347f26d4ed16ed0cdfc450d66e9fc36e700080bfdbeadb7f01e753fd5dcb13eb2d914d869d312df34f4233fe91ba8adce2be66dd4677c4d505b024e1e20a195af5325235d02c7655c558a7e4ed96f179e1eacebbe4f09b178eae2cd27840132aec4fa93f3f6d411f1314e0d6ced495b7e88cd49b9fe158db427d740ae70f3ead4b0864dfb3c177641e4fe92c09954fcedf50ea067f5640dff675652bd8b82ca2cf74f812ead50bb334ce3ac3d2c8ee5da7ad657ee77f26eaa12db83c3e8f9191167410e14ddb3eeef17eab37053785b8c12951ad45a6e02b633de16a83ff12ac0ba7c673a926fad614ecc7b9a43608c89ca6b5a02f927aa5723e2a1ed67c5638adec3689ad31fc4ebb4fe4293aba843090564c72b0289397e758428f9ded7d202ce9fde642f9007e73aa4a4a23c3821797f6c8d0b4b0c24a481a36324c6fe31c6528948419dabb6355abeb5bdabe4785c7803e5d3cbee035ef072566ddb47ee525a1f2d422dca1b81dd939e15bfa53d7a641ece8eebd1bcad3f982a7f0c058e8f79eba25c6d65282e94f758698d426c1a87e4a9ed14aa08ac665af397777ebed4f0849c6402698efc5dedb5ad3d39c120398c0febcd82a091e7ee85884d071d340e6dcfd1853d1a476950601186ad86d02be8678f764c300a6822a0e9815086d392df9ba24371b9e638b26a2cafb302a64f0b006f7bbe5d3d6e5956af561894caef3c3cbd909e37e57a9887d5d842f401b09112fe4f872563042b98a6c18b5f9f2c72d50c9f715aab94b1949abbcb1ec030a46d56b2ae1cf4f7443d80c47df61535eb1f222ffbc2635f0da15a6eba83cefeeb29abe07ff3bb7b7807f6b468c7bf4ee551b7429bbbffa3fdd93f6a112fee5a651decf0e5ba3af71c697bc6fd58178f3c87a2a0cb06b1d07f824528bad3ba75e7c00ad8bab58330e316790a22f1bf40aa41abb579075d36e5a9cd068e1cdd81db42ec6eb3e178df2b143aaf70e8861acd7f06c0de73d1dff55a73d1a885a5025826cee612f1421faaffd1057181365679e3a3a6ed8d1408fbe3393d7d3e7be1324790065171213d8b70f6af7ae0faf6d039aebf37f2a9201a96833e3cf30ea0462ab3affe4849c1fd5b70cff1535b42bea5efb13e773c4eb79bec1e1d1772354746307aa1288d8aaa5ad38be68bd83c97df00c55f0f6ac073df81e05107c18190ee184ada53e54500fb081fd14561926686fccaa56ba7b9be0bb39ff772cc24161054407c1a3183cbf6b7163c14fd8e39ca4c7cf7cdf5df9cbfa6b3e877d7831d47d2aec570875433a3484359802643bd285db58ff01042e6a1c25e837f69c3257e0c9ab8d7f7d08c528514f5e177fcae1d70b68935bf0b7d40d4dfedeb4ca4e85c6bd77c8cb36a0a7566786037ff91a4b594340f41863a78138d13718b091bff67f84daf99f46ffc925ab8fb512eff7d9749f9954ece0ff238ae2f719a1a8605bc073060c8da98a6a2e38a5b71027b7018b0f0ca46b29a220fe21d55c27f43a94d1c3ce248df5feea01c3ca4f0aa52d0ea8aa134886040f4d609878e8cdae43d075bbf239c7dc41722369a741bf7fdbd4d7eb681bfcd7ecdd6d34a13d3f5f3a465d584ef086fd35264cc3eff979f3ffa23b0c59b28aee21765b18235fc44a1fc8f7cfa98ebc43a1d1c8423aafeacc3a34077ce7028cf95f58d1203c7287f126c6908dda84a6b8849dd552a2643ce4f14ddc1a855b77af4a9ccbc9743e43bdd199a0e5671c42cdc75f907d237047a892b8bfd37de2e5c32ec4f9d204c1aade652af8e4ee993716a50f11eb00431cbb35cab1c71550dd0d919c999e9d4d9d209426a05fcdb0d2df9242ce71e18f7b4e8060c7ce6a431a8cff219748c1000735ba23ffec2e20d655c9af314539f8b19f9274df409c9f751db4228de9a7a20d1dd9961f1db1256c5ebb1ea8684678983aa1debc792b1ccbd975b9a60728e83bc3e2870fd7dffcb81cbda3da5c49d6f16b499931714fb2c56266e3f83e95671cce7852a9d52ed29b2593ceaf1970d0d39dc81fc54dc0a03ac371a9efdd52b6b7f3db1bc8a5121566ed090fdade34829bae6986933ad4850042993fc7c4d9df368e45f681e3ec2873b46ea61e3f9ab417274a76617062467a4c89c1bacf0490f8898d0fe39c2a7658290d63593f6a1725e6b0eaf651d3efad5580c1250a12f6ef4f1326945d4494cdd5c2c9edd8eca4cd58127b2208e319b19aa3af80cd409649b9d4472e4f972579cb2445991d5c40f92181036730d036947de70270686dfa8a719601f9ba3a3be664d6e9de0daeca91f4f74e35b8629e165b8245f1af71f82108966251b275b8c64633a3f25bbe490fe2d56d861c8c3b266a3dbbc5bfa871cb3c002b5d0fa5ddb8b44c78b7b28da00c49dd110ccd2da4e69a73046718024e8f176e4dcbc787888c8c35a503871f122693c8b2f720c11efd53ba76348c1b63e1c5e4b6eed23b5b723568e603b7ce53d326207102e"], @ANYBLOB="eef6d22bd848ccaaea77fa781ee8385b1e2085cbd4178c0d67aa821e35613d76e4fdbd09cff3129b8cc3408729e93621730629ef1c360991535e788ea341cb44d984edc72841a9c227cf898802e17addf072f5e4c89e", @ANYRES32=r3, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYPTR], @ANYRESHEX=r1]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$TIOCEXCL(r1, 0x540c) 03:39:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x5451, 0x0) 03:39:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x9701]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:45 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xb00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 559.645844] binder: 8910:8913 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 559.661254] binder: 8910:8916 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 559.884699] binder: 8936:8940 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 559.901970] binder: 8936:8941 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x0, 0x0, 0x7ff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) r2 = geteuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 03:39:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x5) 03:39:46 executing program 7: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) lseek(r0, 0xfffffffffffffffc, 0x3) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) 03:39:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x105000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x58) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000340)=[@dead_binder_done], 0x32, 0x0, &(0x7f00000003c0)="a7a8a33223de3d4ca43c8ab72351dc352d02976fb95558716e5c79c16af1f1ac247bb0510000000000000000000000000000"}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffffffffffffffc}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="4c000000503b804e818500ca07f4b910ed93ad49f5fb44c87954ebb415118c801a582a0b8e3e292a041c20000000a342b615ab98a03e847b253be5c8f4f003abdd6c1803bcb7b47da373658d8c719d88"], &(0x7f0000000180)=0x54) 03:39:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0xf], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x11f}, 0x2c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x3, 0x4, 0x4, 0x8001, 0x0, r1}, &(0x7f0000000100)=0x20) 03:39:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) [ 560.603722] binder: 8958:8963 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 560.624804] binder: 8958:8963 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:46 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x5) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001380)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000000c0)) 03:39:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffffffffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:46 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e280000000e0affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xc000, 0x20000800, 0xffffffffffffffff, 0xe1ce, 0x2, 0x8, 0xfd3, 0x7, 0x2, 0x5}, 0x10) 03:39:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfeffffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:46 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10800) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x5eb, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x10) 03:39:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) [ 560.849226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 560.880910] binder: 8995:9004 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:46 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="3b03ab48f7d42eb2c9c5c934cb73e263ba7c919f740e950b94da2b1eedb2a30ebfea966a92f366d8d2829ccacc54d3c410daf6d2c572515a95d8cf2cfb170a1bab59fc504040cb27e5813956a9cbd56cbd2577946f5d2cefe964853bf4470cc59b94a2485e66853ec0c48c1617bc33a0c0ae1e755e317603b6fceefbac228fbfe685d9ca5067fbefaf250191b8312a94e127e6d0c8aa84a967e8f14a", 0x9c}, {&(0x7f0000000440)="0108086e3a8ddf0333937ee359f9f2e5b6b45f268f04233c378371c88f3355e7dfc025a822f29faab34ed5fafc3fb7d610fbf38a72ecada07cea8dcf3adf9081c2be202b6cdc3a5256b8be6e0256fb4f1a2f4f716eec6ba3256458603ef56c9b84df58b90bd1102e59ef92865366fd46093c649dc27d0c1882c97e5aab40f2045a2f3d1eaacade800dbc6de201a3904a96915314d094053395077e96745943ea8e17af", 0xa3}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x151002) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/248, &(0x7f0000000140)=0xf8) 03:39:46 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x100000001, 0x2, 0x3, 0x1, 0x38d14c7a, 0x8, 0x2}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000280), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) close(r1) 03:39:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x400000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 560.916557] binder: 8995:9008 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 560.930243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 03:39:46 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000070436829e9e1b1193d085a6fa44e8e3587fc4b7898fb574ba40097a2d666c1bbb435925b30cedc2a89a4f7a34c"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:46 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="720af8ff40000000bfa100000000000007edb124b88da5621be219ca010000f8ffffffb702000000000000bf120000000000008500000004000000b700000000"], &(0x7f0000000080)='GPL\x00'}, 0x48) 03:39:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 03:39:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x80000000004, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0x98) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) 03:39:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x9701000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3f000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:46 executing program 6: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d}, 0x2c) 03:39:46 executing program 7: socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/106, 0x52}, &(0x7f00000000c0), 0x2}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 03:39:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="106308b58a33070000000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1c) 03:39:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 03:39:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 561.461988] binder: 9062:9076 unknown command -1257741552 03:39:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x408000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4000000000004e23, 0x4eff27b0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x1000000}, 0xc) 03:39:47 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xeca49a4d41d82f6c) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x54d, 0x951d2c7) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x75, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000200)}], 0x3, 0x0) [ 561.520011] binder: 9062:9076 ioctl c0306201 20000300 returned -22 03:39:47 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x5000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:47 executing program 6: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x200, 0x4) sendto$inet(r0, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{0x4, 0x8d21, 0x3, 0x2}, 0x19, 0x0, 0x0, 0x0, "e98df3c9df730394dff6fe298204bdbaa0ea798c7488ae845ef157de42d1acc6252bc83000533ac19d18964e8727284c1e6bfdadcfeef0b3d8fa27aa7c3fa602"}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x400000, 0x22) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r2, r3}}, 0x18) 03:39:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) [ 561.569111] binder: 9062:9087 unknown command -1257741552 [ 561.602567] binder: 9062:9087 ioctl c0306201 20000300 returned -22 03:39:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf00]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:47 executing program 0: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x200400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000140)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1002bd00006ae35796d5c080"], 0x0, 0x0, &(0x7f0000000240)}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x40, 0x1c, [0x25, 0x3, 0xffffffffffffffe0, 0x1, 0x8000, 0x4, 0x8]}) 03:39:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000001840)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c0000000000008893", 0x66, 0x8}], 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x7, 0x9, &(0x7f0000001700)=[{&(0x7f00000001c0)="9137c29a3175d5d518b5b552c5d3f67f246680088fb1d5b9bfa23d0340639cb06b61a9fabdbb11ae84a9565950301c9a397ff1809bd8754f80f4f4817917eefb7302cc549a956f35e22998c397c067239613780ff76e874518eb9e3e026942092b050735180580dc8cd54187b7a1d58131cd29835824afaf119f7ba8b4dab4bc8e23eec72470eb2b59189124fbe527e6adbed37f311ade7518aef8efeaf5181c968f5da7dd49c9d4ce520cc2fc9f9e55", 0xb0, 0xffffffff}, {&(0x7f0000000300)="fcd00d41b49c31aebde18e8cbceaf603f967f3b06d2ddfdc7d1e88b868f48fec7f955ead4e6ab6b6403c823a1194c3700f38353d41f1f4dcbb659daa55d205f89044a8468d414f0e6a76ae0179857d32a70ae4c65809dc3632cb8e6b6607e193fb904925b0f1c3e0e4aaa175509c76704e62eb9c69c6a15d75f778c0b6f15bd25ca31fb48bc633d397287b9ea22a975bd45abf45e87507", 0x97, 0x5}, {&(0x7f0000000440)="c42a505cc8fa606e1b69ce0b885d35b3f97790b452787e4135fcc1ed84fffa1acfbadf031cd964c3ef244749c0007e6a37e5d45734921b5368288ab78a62a69d356cdfb5cb053fc477cfb4b6e79e6400f3d8ffa1848b334140add68b98e558f6f77818463c3f78652203f7b6117b0716b4b1f65107a21d6f0d8bc43510488bd2c6265ba1bce4", 0x86, 0x3}, {&(0x7f00000000c0)="295e7abdc324cd0b29603d2e5b26249842df1285a8261684dfcc3a71d7f9727230bee095e3e9b40d6e02ba58a0f965b422c4d25b417b", 0x36, 0x7}, {&(0x7f0000000500)="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", 0x1000, 0x5}, {&(0x7f0000001500)="b39c28cad259e0a1833b5c566101a464b6bec8eb840359c068407ab0a59571bcaa81edf1201891d51c9e01f5a01f86a7ea3343a47b254aaebdbc7191309960429cb51e46e7eec6c602da3946c2cdd8efdc75abc8e043123ba02cf26c484f5e01030b01d5fbbfa4765f71d117130b430bbae5b185514376c96041141eddb25e7e1144c75162c21d7d5709dbb0648495b9c040551b4a48d856d2e125489a98d916940a4955baf1cf5ad8472baca9fefba94769a4c6d857967cf196e5d5881aac4005b5ddd20a9d3dc02d152a09b3", 0xcd, 0x5}, {&(0x7f0000001600)="3e5657ac40a9d4976ca48df796824a76df87cf495608ec208bc7296d9d21098af302e9fe41681e66e582201cbf885a316833846ca06255796de94ba33ef88101fbd111eda6d96e188a929d27c4b47c6c55c3d20ce12e018e082f182fcd61b3c61ad05b116522ad6117be841d01d28119ae3126cf924dd600ff26a2cc9cdb4c851de2e05577afc3da441cd034f414021fbff612fd67906bee71e78ea2f22b6821a4ee0dc472fa00b2948b5f0c2797edc18530c04bce0e6364945fa525f4f7573bbb0b154d79498c80fe2aaf17816c30823ed1c326c13074c6bb7cde14", 0xdc, 0xba8d}, {&(0x7f0000000100)="784aa4f29f25ae82f2c340f66f08", 0xe, 0x9c}, {&(0x7f00000003c0)="a605d437ac38c29b9b83e5a8edaeac531e36f06cb266924364af59d7e4eec4c74b7d0bcb3d1668f3d7d3d91d7ee5a13144b7da330b282207b2ded7", 0x3b, 0x180000}], 0x2060, &(0x7f0000001800)={[{@nouser_xattr='nouser_xattr'}, {@noload='noload'}, {@noinit_itable='noinit_itable'}, {@errors_continue='errors=continue'}]}) 03:39:47 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6ffd) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xeef, 0x40) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) 03:39:47 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfeffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d00) 03:39:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000000)="bc", 0x1, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x9, 0x0, 0x1}, 0x10) 03:39:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 561.856661] binder: 9112:9115 unknown command 12386832 [ 561.873405] binder: 9112:9115 ioctl c0306201 20000300 returned -22 [ 561.892619] binder: 9112:9115 unknown command 12386832 03:39:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x9, 0xbc, 0x100000000, 0x31, 0x2, 0x2e2d775a, 0x3, 0x9, 0xffffffff, 0x8, 0x9, 0x9, 0x8, 0xb57e, 0x5, 0x20, 0x3, 0x6, 0x80000000, 0x6, 0x3, 0x5, 0xffffffffffffffc1, 0xf862, 0x1ff, 0x5c99, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x1}, 0x80, 0x7, 0xbc7, 0x7, 0x2, 0x92, 0x7ff}, r1, 0x5, r0, 0x3) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1, &(0x7f00000002c0), 0x0, 0x4}, 0x81}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/108, 0x6c}], 0x1, 0x0, 0x0, 0x8}, 0xda}], 0x2, 0x20, &(0x7f0000000500)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xff, 0x214240) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000580)=0xffffffffffff8d49) lremovexattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@random={'system.', '/dev/binder#\x00'}) [ 561.908223] binder: 9112:9115 ioctl c0306201 20000300 returned -22 [ 561.972932] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:39:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x600) 03:39:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xaf) ioctl(r0, 0x800, &(0x7f0000000140)="025c3f0a00145f8f764070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'security.capability\x00'}, &(0x7f0000000100)='vboxnet0:$GPLselinuxeth0,eth0\x00', 0x1e, 0x2) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'security.capability\x00'}, &(0x7f0000000200)="0000000201000000000000010400", 0xe, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) [ 562.076730] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:39:47 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3c3], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffff9e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') read$FUSE(r1, &(0x7f0000000540), 0x521) [ 562.129129] binder: 9144:9146 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x1) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) close(r3) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000000), 0x80000) close(r1) [ 562.202634] binder: 9144:9154 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x2003, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7900) 03:39:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xa) [ 562.406525] binder: 9179:9182 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x1) 03:39:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfffffffffffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:48 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfcffffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffffffffd5d) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000001100000229bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="001000000408020008001b00000000010c000200aaaaaaaaaaaa00000c000100aaaaaaaaaa0b000024000e000100008000e1000001000080000000000000f30801ff0000000008001100060000000000000000000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x80000) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r2) 03:39:48 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x52, 0x1, [0x23fe]}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x7, @loopback}}, 0x101, 0x4}, &(0x7f00000002c0)=0x90) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000240)}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000040)) 03:39:48 executing program 7: r0 = open(&(0x7f0000000180)='./file0\x00', 0x43, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001380)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000004800)={0x0, 0x1bbb}, &(0x7f0000004840)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000004880)={r2, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000046c0)={0x0, 0x95, "490c0452279a333ecc867ccecc4f18bf9bec2b5c4e8f7ba9be4c440884d16f0f4eb8b338a0dda46753b0b88928006c27075cb09616af159fc134cf604995efbd574861cd473e98860d3b16a4bd4fb3552ab50e0a7c866b135875c0e71c463c533c8f8fbb89b210345754fbbc4a079faac1d9f62497cd365619ed2a546a8d3faa7558a0800e4611ac9849137874d043f34eb9e0f699"}, &(0x7f0000004780)=0x9d) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000048c0), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000047c0)={r3, 0xcc00}, 0x8) getpid() read$FUSE(r0, &(0x7f00000036c0), 0x1000) recvmmsg(r0, &(0x7f0000003540)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000001300)=""/93, 0x5d}, {&(0x7f0000001440)=""/196, 0xc4}, {&(0x7f0000000180)}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/59, 0x3b}, {&(0x7f0000002580)=""/146, 0x92}, {&(0x7f0000002640)=""/79, 0x4f}], 0x8, 0x0, 0x0, 0x8}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002740)=""/88, 0x58}, {&(0x7f00000027c0)=""/23, 0x17}, {&(0x7f0000002800)=""/177, 0xb1}, {&(0x7f00000028c0)=""/40, 0x28}, {&(0x7f0000002900)=""/121, 0x79}, {&(0x7f0000002980)=""/123, 0x7b}], 0x6, &(0x7f0000002a80)=""/12, 0xc, 0xe3cbfe8}, 0x3}, {{&(0x7f0000002ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b40)=""/130, 0x82}, {&(0x7f0000002c00)=""/160, 0xa0}, {&(0x7f0000002cc0)=""/82, 0x52}], 0x3, &(0x7f0000002d80)=""/44, 0x2c, 0x4}, 0x8}, {{&(0x7f0000002dc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/44, 0x2c}, {&(0x7f0000002e80)=""/166, 0xa6}, {&(0x7f0000002f40)=""/70, 0x46}], 0x3, &(0x7f0000003000)=""/182, 0xb6, 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000030c0)=""/46, 0x2e}, {&(0x7f0000003100)=""/154, 0x9a}, {&(0x7f00000031c0)=""/11, 0xb}, {&(0x7f0000003200)=""/233, 0xe9}, {&(0x7f0000003300)=""/32, 0x20}, {&(0x7f0000003340)=""/38, 0x26}, {&(0x7f0000003380)=""/244, 0xf4}], 0x7, &(0x7f0000003500)=""/12, 0xc}, 0xe5d}], 0x5, 0x40, &(0x7f0000003680)={0x77359400}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4) [ 562.451855] binder: 9179:9185 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 562.656246] binder: 9200:9208 unknown command 10 03:39:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:48 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 03:39:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) [ 562.698442] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 562.727444] binder: 9200:9208 ioctl c0306201 20000300 returned -22 03:39:48 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf0ffffffffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)) 03:39:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3) 03:39:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 562.784806] binder: 9200:9208 unknown command 10 [ 562.794152] binder: 9200:9208 ioctl c0306201 20000300 returned -22 03:39:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x300000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 563.007440] binder: 9236:9243 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:48 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x40000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:48 executing program 6: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x200) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) mq_notify(r0, &(0x7f0000000340)={0x0, 0x2f, 0x2, @tid=r1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x102, @tick=0x1, 0x47, {0xc051, 0x2}, 0xff, 0x1, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x101, 0x600000) write$P9_RCLUNK(r3, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x3, 0xb5, "e14d8c65046d027c9551da96d098aa36b323e509d2c6d30e8c798acf617bcd49608d5136a12fb782d22f253e61979e3ddad30f5dcc3c33d3fcc8c11f6b234785f1f8acbde72de4e74009d1d74821a22c3da991a8a3070db7d5e874c4c85708f6d45f99576a2c12fcf32bb8e13280d0b893d4588abab81ec61dba6ace2f7975cd88bef6dc1f183a2dc199bbd1008008869f846aa92f595ef01fb3d0985a00cdaac5d020017c5d7bfa2411deff14b8e3fc3fcb79afa5"}, 0xbd) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) [ 563.064244] binder: 9236:9243 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 563.081069] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 03:39:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 03:39:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000240)}) 03:39:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfcffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 563.284994] binder: 9269:9270 unknown command 0 [ 563.314625] binder: 9269:9270 ioctl c0306201 20000300 returned -22 [ 563.357534] binder: 9269:9275 unknown command 0 [ 563.381561] binder: 9269:9275 ioctl c0306201 20000300 returned -22 [ 563.423384] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 03:39:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x30, 0x501002) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0xffffffffffffffff}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'team_slave_1\x00'}, 0x18) 03:39:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc100000000000000) 03:39:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x10], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='loginuid\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000280)=0x8) read$eventfd(r0, &(0x7f0000000240), 0x8) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 03:39:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 03:39:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffff7f]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:49 executing program 7: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="1db510774375f47a05942c459e810c73fdf5623fb1eea51ac1e04c0907bc6c8326e016c477b652f66bcff5828246a8c69e7a40e2aa1197a1d13cb6162194e50a799882e500", 0x45, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000300)=""/143) [ 563.621340] binder: 9292:9297 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:49 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000000c0), 0xfffffffffffffd0, 0x8) 03:39:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xffffff9e], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 563.686807] binder: 9292:9307 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xc35) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mprotect(&(0x7f0000598000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0xb90594d25c8bcaa3, 0x2}}, 0x14) futex(&(0x7f0000000040)=0x1, 0x4000000400000085, 0x0, &(0x7f0000001ff0), &(0x7f00000000c0), 0x4030000001) 03:39:49 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@access_client='access=client'}]}}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0}, 0xa0) 03:39:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 03:39:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1a000000) 03:39:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x100000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8e09]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 563.915692] binder: 9325:9330 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000001c0)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063084000000000000037fecfa332ee5452dc32060831bac737ff53509a6cd7623400000000ddde0576b473614b98fe1c302c3259466589b9fc4456"], 0x0, 0x0, &(0x7f0000000240)}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000200)="ec029e0855c30c5c13c4c0db01b42a1480b34b6a5de588c8a5bb1359a5a658738d6e8c4a0571be56f500793614aa6e13c23f8a7de4096f4df26ea28d1bf6bbf34bce7bb1d16d6338ee4fcb4f4c623984c203f7745bc6dbd48666a672ac7bc2f42e2ac4a0d4aed98995fd08737577b23444c97a2b12c72d9fe51c03f04fac10477357b5ba2a4d42d2786c1a496af41d761032b30a0fae6b4aa996bf1f102e0fb24fc07f204e466f99aa8e7eae71fccfad2b459b46ba6c00f0124f") ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000340)="a3da1fea8814532f6558ff7fdef415355c9c5dd108e785cc65a500b82a4b532259619df9289e0a6cc74ebfa7a39ce294c737") 03:39:49 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xe669, 0x80) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x0, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./bus\x00', 0xea, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 03:39:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85512, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bcsh0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="10010000280003142dbd00000000", @ANYRES32=r2, @ANYBLOB="0000fdff0b000a00ffff07000800050003030000080001007166710024000200080002000900000008000100000400000800020001f8ffff08000100000000000800050002030000080005001800000008000500070200000c0001006866736300000000940002001000020003000000a0000000000000801000020006000000e0ffffff08000000100003009216000003000000e8000000100003000300000002000000e0ffffff10000100fbffffff00100000ffffffff1000030008000000008000000010000010000300000000803f000000070000001000020065f0ffff000000000700000010000100050000000900000001000100"], 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x8000) fanotify_init(0x41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x9, 0x6, 0xc6, 0x8, 0x1ff, 0x87, 0x7bea, 0x100000000, 0x100, 0x0, 0xfff, 0x8, 0x7, 0x3, 0x1f], 0x6000, 0x80000}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000001c0)="2169b0c5b18e38fbe0b5e94ee9fdab16c0ac4d993350064b63a0e0ee7671b204c51966a46b4621af0f9fdcc488b6a28bbb1bcf58e81123189d970c23ab0e44") [ 564.130567] Unknown ioctl -2147199232 [ 564.145979] binder: 9353:9358 BC_DEAD_BINDER_DONE fe37000000000000 not found 03:39:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 03:39:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfffffff0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xa00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 564.220514] Unknown ioctl -2147199232 [ 564.229661] binder: 9353:9366 BC_DEAD_BINDER_DONE fe37000000000000 not found 03:39:50 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000900000000000000000000000200080008000000a70000000000000002000100000000000000000000ffff00030005000000000002000000e00000010000000000000000"], 0x48}}, 0x0) 03:39:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3b00) 03:39:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000001b6edd070000290000003b0000000000"], 0x18}}], 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 03:39:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x3e74) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x2, 0x1, 0x2}) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x100, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000200)="e018cbff09854b4b7b916a9c9a937fa07e0d7b8f689af3afb52d15dd2a015824f9662e63eabbc6e24afa2a4c045c3b9b374386b7") 03:39:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1c00, &(0x7f0000000000)=0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x8400, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x100, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000140)="aae23bae1e84e6b2e75a2c882174fd06e13c6023f0206477da72795865d74de306a28f51ae89db252a5507029549f555c0d87238e15bc4998a2253a7a7a9cd6b97d3045248388cf1cbe47f1dd9bca8c657", 0x51, 0x7ff, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000340)="88402ccb792956508113d609f40f5be33cbbd9fe7ebea05f1e842b2a2f780adbec4da561c9a8fe9f582f4a78276ca937dca2bbbb93064e9bfb36ec577a339f1954d61d2fd0629b299615100916d0bf722b68d14eb742c0198df1529cf137aa1d5474538d5fcf9e8f96c1d26e2e25841d33f9fdfff1212e50d309343e87adfac2ee76ae2b08d723fac2770c63ee1d8e5b8f69d103b1bfbec143ccd81188ae5a9a46dae0121ecd5dd04e869cdf45d49968d299bca4eca46a2c05ecc922a67fa15b992299", 0xc3, 0x7, 0x0, 0x1, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4d9e, r0, &(0x7f0000000440)="649f6b1f2b4270e61e545c5d8f11f9beb9440ac0f2e82f01a63c317858c3585be9a5760f7b775608846d41225784d505f735ffa760fc76de8d6dde95c45e70ac4d2286d206c5b51cd40552d9b7882dcb9b57aea0dae35ad1db0f935a323afdaa8fbe86e27f7db65f7ad3953d137d75279b97b05ad039b2f29f1a196416cc49321d0e79be6c537acadad4618f", 0x8c, 0x6, 0x0, 0x1, r4}]) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 03:39:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfffffffc]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 564.723940] binder: 9393:9402 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:50 executing program 7: r0 = socket$inet6(0xa, 0x20000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r1, &(0x7f0000000280)={'syz1'}, 0x4) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) accept4(r0, &(0x7f0000000140)=@alg, &(0x7f0000000000)=0xffffffff0000001c, 0x0) 03:39:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x197]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x5], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) [ 564.799547] attempt to access beyond end of device [ 564.804908] loop2: rw=2049, want=114, limit=112 [ 564.810116] Buffer I/O error on dev loop2, logical block 113, lost async page write [ 564.821219] binder: 9393:9402 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:50 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) lseek(r2, 0x0, 0x3) read$FUSE(r0, &(0x7f0000000180), 0x1000) fcntl$setsig(r2, 0xa, 0x26) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001180)={{0x4000, 0xf000, 0xb, 0x3, 0x6, 0x0, 0x9, 0xff, 0xc3c, 0xdc, 0x7fff, 0x100000001}, {0x7000, 0x10000, 0xf, 0x1000, 0x996, 0xfff, 0x0, 0x83e, 0x3, 0x7, 0x2, 0x801}, {0xf000, 0x2, 0xc, 0x3, 0x100, 0x100000001, 0x800, 0x4, 0x2, 0xffffffffffffffd4, 0x5, 0x100000000}, {0x10000, 0xf000, 0x3, 0x8, 0xf1, 0x8, 0x100000000, 0x6, 0x3, 0x0, 0x7}, {0x1002, 0x100000, 0xe, 0xff, 0xffffffffffffffff, 0x101, 0x80000001, 0x235, 0x8, 0x0, 0x80000000, 0x6}, {0x1f001, 0x2000, 0xa, 0x8, 0x6, 0x100000000, 0x9ae6, 0x101, 0x19f, 0x10001, 0x1, 0x7}, {0x0, 0x10d000, 0xc, 0x297514e9, 0x3, 0x3, 0x81, 0x1, 0x7, 0x3, 0x1, 0x4}, {0x3000, 0xd004, 0x4, 0x5, 0x2, 0x80000000000000, 0x20, 0x6, 0x0, 0x2, 0x7ff, 0xb0b}, {0x4, 0xf004}, {0x7000, 0xf002}, 0x10000, 0x0, 0x2, 0x8, 0x5, 0x4001, 0x104000, [0x7ff, 0xb67, 0xd5, 0x8000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000012c0)={r1, @in6={{0xa, 0x4e24, 0xc0, @mcast1}}, 0x9, 0x98e6, 0x9, 0x8, 0xc7}, &(0x7f0000001380)=0x98) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x80000, 0x1c1) r4 = getuid() r5 = syz_open_dev$sndtimer(&(0x7f0000001400)='/dev/snd/timer\x00', 0x0, 0x280283) r6 = getegid() write$FUSE_ENTRY(r5, &(0x7f0000001440)={0x90, 0x0, 0x7, {0x3, 0x3, 0xcc, 0x6, 0xcd, 0xfffffffffffffffd, {0x2, 0x9, 0xd7, 0xc4, 0x1, 0xabb, 0x1, 0xffffffff00000001, 0x3, 0x9, 0x9581, r4, r6, 0x9, 0x81}}}, 0x90) fchmodat(r0, &(0x7f0000001500)='./file0\x00', 0x28) fanotify_mark(r0, 0x8, 0x40000000, r3, &(0x7f0000001540)='./file0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001580)={@local}, &(0x7f00000015c0)=0x14) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001600)=""/76) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001680)={r1, 0x87, 0x8}, 0x8) inotify_init1(0x800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) iopl(0x6) mount$fuse(0x0, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='fuse\x00', 0x110000, &(0x7f0000001740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ppp\x00', 0x0, 0x0) write$P9_RWSTAT(r7, &(0x7f0000001840)={0x7, 0x7f, 0x1}, 0x7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001880)={{0xa, 0x4e22, 0x2, @remote, 0x5}, {0xa, 0x4e24, 0x1ff, @remote, 0x71}, 0xffff, [0x1000, 0x10000, 0x9, 0x1, 0x6, 0x8, 0x9d, 0x590]}, 0x5c) r8 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, r8) 03:39:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8001, 0x200) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x4000000000000afb, 0x7fff, 0x2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x7}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x1fc) r3 = fcntl$dupfd(r0, 0x406, r2) accept4$unix(r3, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x7fffffff, @ipv4={[], [], @remote}, 0x6000}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x80000001, @local, 0x1000}, @in={0x2, 0x4e22}], 0x68) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100f08018000000000000000"], 0x0, 0x0, &(0x7f0000000240)}) [ 564.872825] attempt to access beyond end of device [ 564.877920] loop2: rw=2049, want=115, limit=112 [ 564.882691] Buffer I/O error on dev loop2, logical block 114, lost async page write [ 564.901827] attempt to access beyond end of device [ 564.906932] loop2: rw=2049, want=116, limit=112 [ 564.911687] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 564.920290] attempt to access beyond end of device [ 564.925504] loop2: rw=2049, want=117, limit=112 [ 564.930298] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 564.941606] attempt to access beyond end of device [ 564.946664] loop2: rw=2049, want=130, limit=112 [ 564.951898] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 564.960346] attempt to access beyond end of device [ 564.965420] loop2: rw=2049, want=131, limit=112 [ 564.970175] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 564.978771] attempt to access beyond end of device [ 564.983810] loop2: rw=2049, want=132, limit=112 [ 564.988570] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 564.996417] attempt to access beyond end of device [ 565.001436] loop2: rw=2049, want=133, limit=112 [ 565.006233] Buffer I/O error on dev loop2, logical block 132, lost async page write 03:39:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c000000) [ 565.025817] attempt to access beyond end of device [ 565.030850] loop2: rw=2049, want=157, limit=112 [ 565.043155] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 565.051371] FAT-fs (loop2): Filesystem has been set read-only [ 565.058676] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 03:39:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x1, @dev={[], 0x1a}}, 0x10, {0x2, 0x4e20, @local}, 'gre0\x00'}) r1 = socket$inet6(0xa, 0x80001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200), 0x4) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(r2, r3, &(0x7f00000000c0), 0xc6) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x3, 0x45, [], 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/69}, &(0x7f00000003c0)=0x78) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e21, 0xffff, @remote, 0x3f}, {0xa, 0x4e20, 0xfffffffffffffff8, @mcast2, 0x8}, 0x100, [0x8, 0x6, 0xffffffffffffff80, 0x400000000, 0x3f, 0xfffffffffffffff9, 0x7fe00000000, 0x2]}, 0x5c) r4 = fcntl$dupfd(r0, 0x406, r0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x786eabd005bb7924, 0x4, 0xf, 0x6, 0x7ff, 0x195, 0xfffffffffffffffd, 0x1, 0x1, 0xcce, 0x1000, 0x9}, {0x7000, 0x4006, 0xf, 0x7f, 0x7, 0x1, 0x1, 0x0, 0x55c1, 0x9, 0xe97, 0x6}, {0x2000, 0x100000, 0x0, 0x2, 0xffffffff, 0x1000, 0x4, 0x3f, 0xfffffffffffffff7, 0x8001, 0x359c, 0x7}, {0x11000, 0x6000, 0x5dd765e5331f5397, 0x80000000, 0x9, 0x10000, 0x5, 0x1000, 0x1, 0xeab7, 0x1000, 0x3}, {0x1000, 0x4, 0xf, 0x4, 0x5, 0x3, 0x8, 0x7ff, 0x3, 0x200, 0x527c, 0x9}, {0x3000, 0x2, 0x8, 0xfffffffffffffffc, 0xcc, 0x739a, 0x3, 0x8, 0x1, 0x8001, 0x5, 0x100000000}, {0x4000, 0x4000, 0xf, 0x7ff, 0x7, 0x8, 0x7, 0x7, 0x5, 0xcb, 0xa3, 0x8}, {0xf000, 0x17000, 0xe, 0x101, 0x20, 0x1, 0xcf, 0xe420, 0x40, 0x3000000000000000, 0x40, 0xffffffffffffff84}, {0x6000, 0x110000}, {0x6000, 0x10d004}, 0x0, 0x0, 0x2000, 0x600, 0x8, 0x2800, 0x6000, [0xad, 0xffffffff, 0x1000, 0xfffffffffffff000]}) 03:39:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9701000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 565.219686] binder: 9437:9443 unknown command 17305360 [ 565.229500] binder: 9437:9443 ioctl c0306201 20000300 returned -22 03:39:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000002640)="6e65742f736f636b7374617436004404d9f18c0606d312bf9f2e49559dea0d1e74036a1e96d6d9880540e1502003cf85b22ec322a83b8800cf80605c65a0ba7341c381e5a33f81453e13f3b952e38c973dae5ff14f01e1dc69a587864ae41b34dfbd9681793111459b279efff5c72cf72d6457afc4862c5fa2f208b39f3c701aa51b") preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1, 0x1a) ppoll(&(0x7f0000000000)=[{r0, 0x1400}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x6}, 0x8) 03:39:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xc303000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x8) 03:39:50 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) 03:39:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10040) [ 565.531657] binder: 9472:9476 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 565.572748] binder: 9472:9482 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 03:39:51 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @rand_addr}, &(0x7f0000000040)=0xfd73) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x400000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1ffffffffffffd38, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c00}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r1, 0x4000000}, 0x2e) 03:39:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:51 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x9effffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') ioctl$TCGETS(r1, 0x5401, &(0x7f0000000240)) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000140)=""/90, &(0x7f0000000200)=0x5a) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10630840ac080000000000d2f8d288eab20e2586d6dff4cac65ee28c79c5032d2737e782a993ad55d270edf5de3a041e2a4d3c7d3f231ad85af2fca320a7baf717571da3f01a6f57dff6d8bb43f5621b1dccd72e956a20b93659be504e139db2e077031648df751f4133312ca39d6d17f0db4e93252468be4b13047e8c7f543519aae2e7f58a03a71bd238df7cf055791a483dc41321e7cf4a7df2df011d"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:51 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x400000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) prctl$intptr(0x1f, 0x0) 03:39:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2ff) [ 566.033337] binder: 9509:9518 BC_DEAD_BINDER_DONE d2000000000008ac not found 03:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$inet(0x2, 0x0, 0x9ada, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0x18, 0x2000000000027, 0x1aff, 0x0, 0x0, {0x3}, [@generic="ac"]}, 0x18}}, 0x0) 03:39:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfcffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 566.096296] binder: 9509:9529 BC_DEAD_BINDER_DONE d2000000000008ac not found 03:39:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x400) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f00000000c0)=""/164) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xaea2, &(0x7f0000000040)) 03:39:51 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf0], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:51 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="54000000f0a1634b1fcd9b30366e3ffdfc2fa5b0891107e767078afc78c967ee7cbd0cf59f3c79df1003c33ab4a9dcca6873b782fb7ac081122a07722b888146ded365a57ea0cd05110127fbb6828d723be0339547756ed970b04f15bf627796eb49627e4a00965e757234b6e9ddffebd0cea8a9ca3cc6bbda909b540289b4ad9c80c11e2fb2f0e631128aa7d1528f47bf9e0e8bf56be83db1fb93e5ec6b334b8e7a61e1ee2eab1c26edffcc19ef4d610e8388ffab8a15b46c867470a869062de7aa552591be250736ad5b1f74eb2a17295f3268745aacb323c8"], &(0x7f00000000c0)=0x5c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xa468, 0x100000001}, &(0x7f0000000140)=0x8) 03:39:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 03:39:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="de631f40000000004ed62dfe"], 0x0, 0x0, &(0x7f0000000240)}) fstat(r0, &(0x7f0000000140)) socketpair(0xa, 0xa, 0x1566, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1c77) 03:39:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x47700) 03:39:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 566.284348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 566.297686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 03:39:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000540)=0x80) getsockname$inet(r1, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f0000000600)=0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x1}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400400, 0x0) accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000400)="6a5ff637b0c045b3da9143da2fe2336b35796a9a815e3cbaf60a32db12cd773c6dd3bd44839acea70f799075d12c9b61f32538155bef656dd045e76a4fde3baa24b997964105d8ebcc453e2f9541174aee5f50065ac962675d44f3324b1c20b7a5dc8c1e3a5cd35789148722b40d9b925e4ec8bb07909edb8ac05be1e4b27bbe40671e4184d818cfb9a0f480bc65005252cea584d55a7b19eceb28c3ee4d7d63ec5e8296142682b68e5ca5d527f212bbdd") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() write$P9_RSTATu(r2, &(0x7f0000000340)={0x82, 0x7d, 0x2, {{0x0, 0x64, 0x9, 0x9, {0x0, 0x1, 0x1}, 0x80000, 0x5, 0x7, 0x4, 0x9, 'mime_type', 0x15, '/proc/self/net/pfkey\x00', 0x6, '-nodev', 0xd, 'md5sumvmnet0['}, 0x9, 'mime_type', r3, r4, r5}}, 0x82) [ 566.383768] binder: 9550:9558 unknown command 1075799006 [ 566.400133] binder: 9550:9558 ioctl c0306201 20000300 returned -22 03:39:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7fff, 0x98000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='children\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x3, 0x8001}}, 0x30) write$cgroup_int(r1, &(0x7f00000002c0), 0x18c) [ 566.424156] binder: 9550:9563 unknown command 1075799006 [ 566.467541] binder: 9550:9563 ioctl c0306201 20000300 returned -22 03:39:52 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x4], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="9400000d8f00000000001000a62029724253490a8ccb9dc6edc326a99fa7646148e1a536c219c4854893fe10530c9dbb694c731926fed85e0b72ef19d791b6dc7a978dcf4d26d96f1ff685d476365bd536dd0e9ce4588f1d8364763b6338047f61f96ea382058c3004b582f10a6b7ffbccbb2b85caaec4c2514be9d89855b93aac3ff4c242f72487e25ccc1f0054624d6ec90556d4f502d46763004df0aaf3dc6f9c0e9a85d316331647051e1bc8130885dca5d3e43155d2a4b1582f2db9b832e168edf180"], 0x0, 0x0, &(0x7f0000000240)}) 03:39:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_dccp_int(r0, 0x21, 0x13, &(0x7f0000000280)=0x3, 0x4) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r3, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9effffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) r2 = dup3(r0, r0, 0x80000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000004c0)=""/71) fcntl$setown(r0, 0x8, r1) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@nested={0xc, 0x6, [@generic="cc01869a93"]}]}, 0x20}}, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c0200002300000108000000fddbdf250e000000f8017c00240065007d73797374656d76626f786e6574302673656c666d643573756d6c6f2f6c6f000c0078000700000000000000e63adb18118267a0b43691a8cac7187779f4e191909300245fcabf76a236c1962c205e7e49b9b9005f15cd0b67cd624b0be368dba95e73b6ac1c27c01dd61cf955f0d856c41d7949b8d7d2d0079c6eacb9f03c3887fc0461cdbf4aefe5c82c5e869c319562545d7ac50c007f001c0d00000000000008005c00", @ANYRES32=r0, @ANYBLOB="81a439b7a2cdcf8b39cf3ec26539e53c0fc827ac5fa435d464b1ae7c6efd7d89a900507c8b94e312e93fe5b10a9daebec0c95de448f5a868920e914c5136b24ec80dc2e25399598a1db5bb680e1a0b5755930eb4381291180b4d96853a00899a90bedbe49574a7ce639bf1dfa387acb71ab42cf415d80539a1c9cecc5d1e563cf7a714dc23527fad83fe3662f845c61be6356e1fc69ad32aa4ada1feb75742d8cf7b0f8c08006f00", @ANYRES32=r3, @ANYBLOB="1c005b007d6b657972696e676e6f646576766d6e657430656d302600d8effdf4798e4bc37d68ed9e7ebaded4d23360a91417937750820896ebb37de90719122939018413bad798c0da3f46cd34c108ef05357c5242b6b57163a6ac7064fded447763e7672297a15996bc7b4b7466d0810f43ebb850cdbc171fb98e0572364cdfd95d36aa5e078c56b343611a5375f9a6f5db6f08008f007f000001"], 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) 03:39:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b00000000000000) 03:39:52 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x89c4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={"72656375fbf0fffffffffbff00000002b3decaf54559689b0000bfa100"}, &(0x7f0000000080)=0x54) ioctl(r0, 0x0, &(0x7f00000002c0)="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") 03:39:52 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x96, "44b20ef0190a2262f930c0b0ac19fd11a16199e4757dd96788f127d63f7b54cf301d56e766f924b1dc1a8bfb288b4d110b3f964e9c3720967fccb7bc37fa69893fb0eb7ddc87b25020a80493859c23626585f4a67738bb832052a1e453cc9cc85d245a538c5170825feceb35a2844e9b9fa03d007486b8ad02ff315d0a8f821a56ed257024335b4abad696bcd15730900a7192077ebd"}, &(0x7f0000000100)=0xba) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000280)="e5105426828a36817408a070a5cad5ed3084a49e29207a1e218924ffaec9e050d3b89cdaf2df3a2d22fa409ba03db14c0e4fc8ee27ebdcc21459d48118cff178fd0ff052798bee61e378ea1cd4efdb3f19d41b11cccb2207bfcc358cf9560fa404f31e51bb25cc88d84b181380fb6fd4998afc6a5c32e547fa84e9") ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x7, 0x2730}) 03:39:52 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xa], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 566.777354] binder: 9601:9606 unknown command 218103956 [ 566.801915] binder: 9601:9606 ioctl c0306201 20000300 returned -22 03:39:52 executing program 7: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffff8, 'queue1\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8204, 0x0, 0x306, 0x0}, &(0x7f0000000140)=0x10) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x0, &(0x7f0000000580)={{}, {0x77359400}}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r3, 0x8}, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000001c0)={0x4000000000000000, 0x2000, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40605346, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) timer_gettime(r4, &(0x7f00000005c0)) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r5, 0x1000000000013) 03:39:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x10000000000002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006308400020009ce300000000ff"], 0x0, 0x0, &(0x7f0000000240)}) inotify_init() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xb40932fc1b8be37e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 03:39:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000000680)}) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73dd1b4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6, 0x850a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) 03:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x300]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r0, r1) accept(r2, 0x0, &(0x7f0000000040)) 03:39:52 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x200000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x2e7afdaf, 0xdd2, 0x1, 0x2, 0x1ff, 0x101, 0x2, 0x0, 0x42, 0x10001}, 0xb) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="bb3ebb"], 0x3ac) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) [ 567.056543] binder: 9635:9642 unknown command 1074291456 [ 567.092992] binder: 9635:9642 ioctl c0306201 20000300 returned -22 [ 567.104226] binder: 9639:9644 ERROR: BC_REGISTER_LOOPER called without request 03:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 567.133282] binder: 9639:9644 ERROR: BC_REGISTER_LOOPER called without request [ 567.158285] binder: 9635:9649 unknown command 1074291456 [ 567.166666] binder: 9635:9649 ioctl c0306201 20000300 returned -22 03:39:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000006c0), 0x0, &(0x7f00000002c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)='tunl0\x00') fcntl$setlease(r3, 0x400, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)='tunl0\x00') sendfile(r0, r2, &(0x7f0000000040), 0x8001) r5 = geteuid() r6 = getegid() write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, 0x4, {0x20, 0x1, 0xffffffffffffffbd, 0x7, 0x4, 0x1, {0x1, 0x3, 0x0, 0x8000, 0x9, 0xfffffffffffffd4b, 0x3ff, 0x2, 0x0, 0x7, 0x101, r5, r6, 0x7, 0x3}}}, 0x90) 03:39:52 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000100b0104000000090000000000000000f42b48345d282870d153d81bc48e269758e8a2c38959004963c5b0b9e5f6e04454bd002940e80219c2437bc233ec2606e51d7fff443ec0f366242319a8d0aa55e48122d7da38b20bb933bed70e3019ff75aa380d90d1ec0b5ab4164161c1870589f3e64a1fe3901395004ba73700f79ea0bb23e0d525539bf4ea8c6535d6bdad55291cc5fc8e924a9b95eb95836a8e0c40c020a94497b6d31c4f18794a81707be931a3ce36a0ea1e94d326648629cd8efdf1c1d5f7065802e4614c45830366c20704093c9f8f4a3e0000000000000000000000000b411414c0ae305772a4d9214e9aa6c887b9b5b37e86393f99b7d4374604663866631aff64070d25c7a0819202860335b40fd97b73e6745f6aeaa328f9b421ff7fd3791a82a15a5348c422efd6ccf5fad8e2f32561155e4e2378b63ce857c2e1624d78aff3b4a4c804cf020420a7424665abe452584ed226150968e65cadc20e4b338e70750f9269e806894c5870e94ab4c1fd12b7b47de41c8e81e99bac958614e3ca43cf", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c000100697036677265000004000200"], 0x34}}, 0x0) r2 = fcntl$dupfd(r0, 0x404, r0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="73606bd6cc6c15f219e62bfca53ae94202d4dcaac1d250d99a9f419004495fbce9a6ee1396fab2480627da468dcb77fa023942e21d0eb8bb8d8f80af5bfe57af3b261f6f8b7232479f1b134f06d94ee6e6038900bb61a2641a5b7c2886450247cf7d03ff95dd6dff21b3323ce48e8a4afbf172a63ebd76a8dadba39efae49f9433ff623e1de57b9a941f83c2559dcc32c7fea0d54858e1eb82863422a960e4a55f00dbfffa5309941737ed2426111acedf0da2cd00ccb0156f0231a45c82096e338cf334ac65ff2ca86a1cac93", 0xcd}, {&(0x7f0000000180)="9e", 0x1}, {&(0x7f00000001c0)="ff4bf225bc7a837e6812002534960c7b989b5ff57d3764217f73293e1b80e9bcda58ddca4dfb8e39a528f7bc2d3c2784", 0x30}, {&(0x7f0000000280)="5217174955", 0x5}, {&(0x7f00000002c0)="4ffaa12b5bedd49918abbb18dc9af298ef6b6119058a38a6296c5637c9f3e5835a68e42b44ce1b624d1696", 0x2b}], 0x5, 0x0) syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000480)=[{&(0x7f0000000400)="57d80b5a3e07bfc17f8cef98be9fd64c9cf3e2552148317ece31f3f4b3acf223afbee5c78a594955e50c9fd679f52bff325973ca442a934c3791c64b72faf4ea33c0d89f0599c0498a074a783f8b636258b4e1455121a1d6d2b801bf4c79e22ea481b1bf590a0b74fea55107b141b7", 0x6f, 0x8001}], 0x20, &(0x7f00000004c0)={[{@commit={'commit', 0x3d, 0xffffffffffff3a97}}, {@localflocks='localflocks'}]}) 03:39:52 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x9effffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) 03:39:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={&(0x7f0000000000), 0xc, &(0x7f0000000980)={&(0x7f0000000500)=@updsa={0x184, 0x1a, 0x101, 0x0, 0x0, {{@in=@local, @in=@dev}, {@in=@multicast1, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sm4\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x184}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) r5 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='/dev/kvm\x00', 0xfffffffffffffff9) keyctl$get_persistent(0x16, r4, r5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="f10f8f4f71c09fadada25663b75996c2e8d95a61a19b7d327483659ff3d7f29fd969a4083973c97698e3b249c8b90dfb1dc42ff6e9218f0a5ced64afb133020c500afabd683d191a83b67babc597e6a0e46dcf43f00b1bd005d79dcb80639c28d6cb66d5be5d277ae0286cffffffff6067db9b37fa5e5b6ff8f66d4185d5fab1242454b284dbd4da734d90a752"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8e09000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:53 executing program 2: r0 = memfd_create(&(0x7f0000000000)='*{\x00', 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xffffffff80000001}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r1, 0x20000000000002cd}, 0x8) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000003c0)={{0xc, @multicast2, 0x4e23, 0x2, 'nq\x00', 0x10, 0x1, 0x77}, {@empty, 0x4e20, 0x3, 0x0, 0x8, 0x6}}, 0x44) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r1, 0x70cf}, &(0x7f0000000340)=0x8) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") fchmod(r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="f4b3d9a1e4799ab21c2295fd8696cf0c32404943a5e2b4b2f60424c0581fa30df4710cada6942d6de7989887d87ace489168dd0eab6bc953e1d74ae2a451658e8c1c3187900aef669f9950c697175abf0a590455b88cd8bf5f0c60b2194f2ed9b3ad01ce655cf1d607ffd88f8a53ceda601d8b9e0e3b2d21e4e6d9be9fc61d77dd00000000000000000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 03:39:55 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r1, r1, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1000, 0x42000) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'pids'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2f, 'cpu'}, {0x2f, 'pids'}, {0x2d, 'pids'}]}, 0x2b) socketpair(0x13, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000480)={0x40, 0x1, 0x0, 0x0, 0x200000000000001}, 0xc) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="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", 0x6a, 0xfffffffffffffffc) 03:39:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40040, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0xd9fe, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @multicast1}, 0x104, 0xfffffffffffffff7, 0xffffffffffffffc0, 0xb2, 0xffffffffffffffff, &(0x7f00000000c0)='eql\x00', 0x59, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:55 executing program 6: r0 = socket$inet6(0xa, 0x9000000000002, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000140)=""/122}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffff, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r3 = getuid() sendmsg$netlink(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)={0x15fc, 0x20, 0x708, 0x70bd25, 0x25dfdbfc, "", [@nested={0x134, 0x91, [@typed={0x8, 0x12, @u32}, @typed={0x14, 0x53, @ipv6=@remote}, @generic="4aee67e96e00af", @generic, @generic="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", @typed={0xc, 0xa, @u64=0x6a5}, @typed={0x4, 0x61}]}, @nested={0x12c8, 0x6, [@generic="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", @generic="bfd9564fdd38a4db8a74622bd8ac522a778de6500355000f21b33b99ab2eb21bf544a689fd0d90ebd92bb5185cb10d8fc0", @typed={0x8, 0x3f, @uid=r2}, @generic="56bb7c817ec3b32ee2b4aa45b66fd69145bd714b1c2cc2a7ff6e86d6f448d1a7e35349be7bbdee3eed7b517d4876ea3f1c85542e793ef2d21f2854b3adf989be001c1508c62a9e4500453aa04d1051fb13c1c30d14b542fff8cc824a8d6d28035f71c1af7e65a79c2a82fc49d95d2ee1133017daa6a4388c6426f39f038750806a48ef161d2f11dcabe1313f1665b17e09b6cf94595d1b2b333d7b8e70490382df369bda823fffe74b190d5dbd634e6f53af74ab89d9a96408952b261aa25ee0d76e0a318fab1c9f384c9e325b51b89dd9", @typed={0xd8, 0x46, @binary="6db10239728b6631999448072ab005f0b0c47ee77be984778233da60cf1812812d8b0dfd0424a2a481b4bd334b1f75fd9a99313c445bebff53da05591fb8cf782886153befcccb0250f0f068a120eb0f7c8d7f9d25d256c78ff7af7a43c8f95b041d37e083d858ae9f3a227515a865dd8e5efb1a2c414116c7ace7e8e65e5befb8872e28ec3c1aa1fb3e0ea310bbdccb379224239fa4d5161310fbdad03dab676b8654eb28c23ef29a77256f858f6d125c085cb3b841d19a7d2c84ec9968a62b69a4bf95b8cf04cb42bda76bd004c5037f34ebb6"}, @generic="959f9ae8283f238f99fb2de78a72df3160493df83c5455c359ca416655bf55d396c77ea7b8cf6d9df5ba836992d953d7e31a377e5a8fae7b3541cfbca0f03d2d161dd6658d72a54c7e5361ffc727fadcf5baeb818ba1e041b44a9ff63fbddd7af181b95899bdbf82a1d546eb5bb4d1423c02a8db147bd2f4692456393131347354005e81dc42cdd5036b2e9b0f5e80e896ccbb29001601f4f08dd54caf828a16cb03013a13b6128ca671faa3cc71e8bec2948b6016ca9b08a0a6285ebf6daaad65bd2700b6a37e42b3bf7f63cc06f3ee9392d0fe39c74c8f29afe1709408ad16"]}, @typed={0x8, 0x3, @ipv4=@local}, @nested={0x120, 0x67, [@generic="dea247797af5baa97a9311e0f7ffa6639d861090ec5cee16fd808f1305428453c21fd972595cc89ea3f70c07ed7585a17a48635d5191e6bf0745eab4f7908364b09fdc0c2035e89c90226c3c7753aa8dcc2a0aa68ad33e7f27d908985dd54cd88bb2a93bb6af6f1bd66f887e9394e594360b68ceedfed6172be8ac802dd5f7d10a5eb5fd27ff883519a265e92e4b99ba3aa7611a2690abbd97650ce94966ac8d48bd85c8e91517f8e3f86acaa61cf9192982217c9ad250d3242f977fc13486332c10273fa236e7285de8119d9ae57fcf9a133127bb644d8b39adfe56ae90a2d78e8dbe403f1d899f5dbb7d8b41", @typed={0x14, 0x2a, @ipv6=@loopback}, @typed={0x8, 0x8c, @uid=r3}, @typed={0x10, 0x20, @str='vboxnet1\x00'}]}, @generic="1b8e50ef9b10624068bea2b50ffc93eb1493a00edf13c2ff298b5fc745848add9592832c5dfa140e8ca46bb9054a2891a1c31638e329eb0adb0880ccb5edb8a05b6529e4e223af53d0a93e914060fc60bc78a2818615706824aed72241224e4c37b8c577d0e93a5790d6a93542bd2cebc2b02b28e6a4656e00183966bad9dc0cfdbc9c6889db483670e831d7c781e8ebad83e24ed6d851d9c610e7c7b13c11d4d9b2564b32bed95addcdc172da902e4e16b150d85af245b6cde56e2bfdebb86a99ebba", @typed={0x4, 0x6e}]}, 0x15fc}, {&(0x7f00000018c0)={0x1010, 0x3c, 0x400, 0x70bd2c, 0x25dfdbff, "", [@generic="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"]}, 0x1010}, {&(0x7f00000000c0)={0x10, 0x25, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}, {&(0x7f0000002900)={0x78, 0x2a, 0x0, 0x70bd28, 0x25dfdbfc, "", [@generic="ee371570f2c31944f9ac4a936aace6da3757e16da78d5415d7b138b6346fdd5c3e582487d6ca243fb84734549803e9d94b60ca7f8195a6a4df01c3e442a7425d44ca4fc3615ed2f375177daf1e1e4f9c4aa32223a70c00b79970b1ded7ce850e8b8ee1b14e72485e"]}, 0x78}], 0x4, 0x0, 0x0, 0x20000000}, 0x10) 03:39:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x17a) 03:39:55 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xc3030000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x400000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:55 executing program 2: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) clone(0x2100, &(0x7f0000001340), &(0x7f00000013c0), &(0x7f0000001400), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'irlan0\x00', 0x400}) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000000040)='1', 0x1}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000001540)=0xe8) sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81010080}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@ipv4_newaddr={0x20, 0x14, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x200, 0xff, r1}, [@IFA_FLAGS={0x8, 0x8, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x404c001) 03:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="ca3e5d"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 570.035095] binder: 9713:9719 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 570.057423] updating oom_score_adj for 9721 (syz-executor2) from 1 to 1 because it shares mm with 9710 (syz-executor2). Report if this is unexpected. 03:39:55 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000200000000000000000000000400000008000b0009000000"], 0x28}}, 0x0) 03:39:55 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfffffffc], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 570.096268] binder: 9713:9734 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x97010000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x100000001, 0x6400) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0xacf4, 0x4) 03:39:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x73, &(0x7f0000000140)=0x4) process_vm_writev(0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/68, 0x44}], 0x1, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/46, 0x2e}], 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x12, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2fc86680b19ee728376d14b4a4097c0546302e8d4981a341248801686a64889416639259dac23ca7710ebaadf3adf8e0e58b6d1ff722a37bab21bf226db908a9940da11cf68cb7ad25516c47d1bc1cab8a5a9b7d7346ed52110e1e9e40bb77bde68038bbb67fc3234add56505f771191a27a232c328c5b96f4cacdb0edd50db66f5bb4b1d0bd67b67664645b830ceed775239f059cabdfe33ff9f32d63b61eb12a30ed92d28b654439ce12904ec9edaf69f0440ddc0b"], 0x2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x341000, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x8, {0x2, 0x4e23, @rand_addr=0x80000001}, {0x2, 0x4e24, @rand_addr=0x140}, {0x2, 0x4e23}, 0x200, 0x400, 0x6, 0x9, 0x3ea, 0x0, 0x3, 0xccd, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:55 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x480080, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000008c0)={0x0}) r5 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100010, 0xffffffffffffffff, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0xd8, 0x0, &(0x7f0000000980)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000800)=[@fda={0x66646185, 0x8, 0x2, 0x2f}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x0, 0x2, 0x11}], &(0x7f0000000880)=[0x28, 0x30, 0x28, 0x0]}}, @dead_binder_done={0x40086310, 0x2}, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000900)=[@flat={0x73682a85, 0x100, r5, 0x4}], &(0x7f0000000940)=[0x40, 0x28, 0x78]}, 0x600000}}, @register_looper, @request_death={0x400c630e, 0x3, 0x1}, @release, @acquire_done={0x40106309, r6, 0x3}], 0x42, 0x0, &(0x7f0000000a80)="57d73eaf87cea18dfca139fadb6c3158280a9292b2faefa86d0d0ed06675987753e911ea375cb338203af47a20b8fc43059bb5a7552321be1c3175705cc8963287ef"}) ioctl$KDSETMODE(r3, 0x4b3a, 0x9) sendmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x56b}], 0x1, 0x0, 0x0, 0x4000000}, 0x10000}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)="a1635eec3c6f42dd87adafd3bbbbe127de6b8b97c7e054068d5f71c6419afd8ca4d565cc798e9ada3f2576fbf2a6d0854e7293710e4cbaed9ac6e1f71352da25db633e637822e7804c411d916c87cb500988f83512382bf5bc102b111bf433d30e62ce119b54be239bc6044f7560271456c70df37a435057fe6e79491b0440707e627a97113add5809432dd3dd09e0710783337e8d", 0x95}, {&(0x7f0000000180)="335bd5f85cbac44ea69d68d87d2bfc2f5aafe996caef1c69577b31a78efde4fd8298c15c29b0997e71a73e17a87c0411742e137f0ef75792658aa95b5c00fecf072e31af98683767f41776bccad8f79110651a1366a2a8db70f42dec9b8d4892c6cc809927057ea4a3734734c6be68a4c884", 0x72}, {&(0x7f0000001500)="b53398b8b8d47217e7c77ce84356506c355364da2b5a47ce4e355cf3585573430cf342ad8a0f712e2d80e27962b1f3cf1b756a09641266b1a9cf90aad334d3b9a7162d6862e68d71c6692eb948cdf723044e456855460660762ae23867cdba395241ac15a68b92c81c3fedaad185f5dfba1c6fcfacf1a0ab38fd329b568b275d8c060a8b8a136d2d100756f7d4ef1b18af99fde4b8eb2819304e44e57d5479237aff8258992b4e1d53f250f0de832055e114daf9a97186dd1a55ebef37c9ca74cd074039e959659a865b6dbc9a9089ebb8b53b9b8baea9417052a569c8fe92", 0xdf}, {&(0x7f0000001700)="760582bdc83323fe873318968b34c1f373b0a5e7526b13713d0a94cd956e6d4729556160802610b7e12fd9319dc2ffd382702011d27c9ce3f2bd0218cae1c79945431217013e7f508f6ac8cbad1d1cd2b3a6ff1cba54cf57dfb2b9c7ec73d65733dabb0954b000bf4b10fbf5159e3db2528ec9ce45dc7d3c4e2367555f5f059fe4a182aa389c8051b6be936cede011393ae6de211bf76ac9312d74a87e8949a9bb504eef0857001bfdc2a2fa12d575a8804eff0b1021a0832805aaaa5a7aa51c9fa72f14ed1ed0452f9e50474619449388", 0xd1}], 0x4, &(0x7f0000001880)=[{0xc0, 0x107, 0x4, "1156280c38e6103928133559f345d356ecc9c21d3996eb01dffba3bac627dd350b6cfdce5f1159324df5d1470ad1d982660c3977e9f5298ec3ca5b16148e17ee5a72082911a7960903af00ce9f6d231c578fd4b09f70450a7179327be98ebec23448ca1cc8c8751312a03c6d1f7df14198fa6a5b9aea2c134781ce76645fe753ad6eb18112ea2ca3f64a7ca2acfb5ef105c01886ad36073989a364ed6da55aa7250c1dc676cc156f402c"}, {0x108, 0x11a, 0x1, "2bc9b8252822810518a899ccdc7024c9f84d40280c4cd3eda5a09ca3f86e9d41200c07a4e9d38f99cda672b39006673fc91da99a32f13d8b9f7ae70ad9f3c0449664399d587bab62cd984e7e5f88ef7cdf7a592714201ebd087fe41e9976d9f9f023d1a44265f5882a37594c43f977f0e7f899c2309ae93aec45f77249725245ea7a9d9acd0b5f7638bdd552271027ff343ce27dd1e629dc07ad41dcc08c07469c173a6abecd2baef5f069258f47cf8cfec4a1a2e8e8d2ca4cddb630ec7adc012d384fbf6e16ff895f7456dfb2b07d55c1da61b6dd08ff8f8182e2029ec22f626e5fac3c47ccd6e38cdc262fa1d385dd1512909a40a7"}], 0x1c8, 0xc0}, 0xfffffffffffff000}, {{&(0x7f0000002cc0)=@generic={0x11, "14a124b3f62916e7bbaac71ab4223bdf37023b0314feeeef88b3eb22fbf82b259cff58039d1c5d22bf645ce0e9b839b89c089256e3f1264034a1792d004195a44e28c35b620bec8927a7d9cdd27a6d7b09040d863fbbb05193b14a937f908b4cf4cc96b7b948e43e4fe8a335a7b68e30c41533511a3ddad1dc9b96ea2501"}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003d40)="12f7ccbe60b54452a5e3d505b5bf4597eae8c2", 0x13}, {&(0x7f0000003e40)="b7588147cf15f6cda926ebec5f53552890b2ab158efb77faa41fc7604e43ef2f81b9ff423ae8148f21965af27c456d2f205d19ff68fc6a8f6bd95f18c69204b5acc5eb8a9b390ee3ff59f238f91cf4227d88962843a30818416073eead69ca034e7c4898efe9081fdccdb28eecdbc322ae93ae82e0d712a2df9e8fd6e7c7e15551fc7f6a9fc12d25e649b8ad68e198b23881f1", 0x93}, {&(0x7f0000003fc0)="4e366711d349ea5207c83cd59c094f1e9a82da8e4dcd426036fc476a4f5c928c8faec5f92df4b98ebfaeb8ba258b5ec0641551fa27fc935a36374a938c9d75e0db068afb808f6970903a715ca5f9009ffe31238e98366a3d054cfab73a746abe10d19dca", 0x64}, {&(0x7f00000040c0)}], 0x4, &(0x7f0000004240)=[{0xa8, 0x0, 0x5, "9f91ba8f8cc08f1d08aba3f7cdaa7c6ecba85004e0717e79fdc83603973da7961e65e88adf91240548438e2db2dd8eda715351956e91112cf0b02c3ff1fbe47bc6f8d7cffb47c7783fb3eeae6b73003b4dfccb28a45c1cd3021a387547e28e1c68fd64299a80cb27bcbbe4dab3466ef1ee50f475319bfc704f6a9a33d96ba91cc29c1d420aae41ae7c63cfd434503f7b2d7372ef7ded"}, {0x30, 0x11, 0xffff, "b59055aca3ada50cef0748af5ad9fd712c5a9833035d7e65bbf587"}], 0xd8, 0x85}, 0x7}], 0x3, 0x4004000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x3, @mcast1, 0x9}, {0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x3, [0xfb8, 0x7, 0x9, 0x8, 0xff, 0x3, 0x41c3, 0xad]}, 0x5c) 03:39:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x20100c000000000) 03:39:55 executing program 6: r0 = socket$inet6(0xa, 0x5, 0xb2f2) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x0, 0x0) 03:39:55 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x500000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 570.379984] binder: 9757:9761 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 570.394362] binder: 9757:9763 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf00]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8400ae8e, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x9]}) 03:39:56 executing program 7: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000140)=@random={'btrfs.', '/dev/null\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x3) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) umount2(&(0x7f0000000380)='./file0\x00', 0x0) close(r0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x6e6a, @local, 0x6}, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x10}, 0x100}, 0x400, [0x0, 0x100, 0x10001, 0x8, 0xffffffffffffff4a, 0x9, 0x8, 0x9]}, 0x5c) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)) socket$inet(0x2, 0x0, 0x0) 03:39:56 executing program 6: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0xfffffffffffffef2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/154, 0xffffffffffffff3a}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) read(r0, &(0x7f00000012c0)=""/4096, 0xb5b) ioctl(r1, 0xed7, &(0x7f00000002c0)="116ab108f29dee367893ddc969b61d50122a1f1d16cf26a73d9a42ea7297e65c4566a93e42877456061271dc27661471673b7da65b2eaed4f92348aa7970c656606d0e5f87298cc6a406b94407cc3730fbfbc7fd2e61e7625dcc8b5837d182549e498520436723db0fd3f684572c87166bd83be4535bab59dfd3ddf39dc7e1afb8b28bdbf92a4ff8f749c0827d822ef15f6ddcc31a15ba3831c011595b29cc3a553a78da7c7ba8e828c2394bf0258755b0dd5d7d99a579b56a207162fdc6fb68e07d2255176d6ab5baf86d38d14fdc890296612e1a73806316dca418a6e49624b813e00e576149eaabe6587a1ffcd44be2f614") close(r0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) ioperm(0x3ff, 0x7fff, 0x800) 03:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0290"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:56 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xffffff7f00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 570.719479] binder: 9800:9805 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 570.766198] binder: 9800:9811 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40010000) 03:39:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000140)="0a5cc83e5bd8793a34d09a375154491bcd2e12edf4775a69652034669103c71af5b60a0d5a9da49cc5a803c7b6f7fea77115bd100ecb873e64d9ec8924579ea7e3696c6e399ead0f533ff84328624fc82f171cff694de07a26a336e0823d6acede90c9ce509c976a") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000f2f6c39039c1410d3030303016000000000000"]) 03:39:56 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x4000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="0888c66ba9e42831bf54475e92143138d98e0198e5f64476b5c9fdacfa8f2b46c3a6dc8130e52b2f7e454bb7c422f0bc9157e596c37f5319470f25e017fcb9ba665f32a4736b0c12fadc8b60055d", 0x4e, 0xfffffffffffffff9) keyctl$describe(0x6, r1, &(0x7f0000000200)=""/195, 0xc3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x98e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x10, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x90202, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="f0828b000000005d199f020000000f20c035080000000f22c0660f3881b4c83e9b00000f01c90f5bf30f0198feffffff2e3e660f388132642e660f3881370f01cb", 0x41}], 0x1, 0x4, &(0x7f0000000240)=[@efer={0x2, 0x8000}, @dstype0={0x6, 0x6}], 0x2) write$P9_RUNLINKAT(r3, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) [ 570.955249] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 570.992797] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 571.040442] binder: 9840:9847 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 571.083361] binder: 9840:9853 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:56 executing program 2: r0 = socket$inet6(0x10, 0x8000000000000001, 0x24) sendmsg(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007fcdb72d1cb2a4a280a80a06050000a8430291052369250008000800024000e379001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f0b91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) 03:39:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:56 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x1000000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8010040) 03:39:56 executing program 7: r0 = semget(0x1, 0x0, 0x88) semctl$IPC_INFO(r0, 0x7, 0x3, &(0x7f0000000440)=""/223) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x200000) statx(r1, &(0x7f0000000040)='./file0//ile0\x00', 0x800, 0x90, &(0x7f0000000280)) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000380)=@known='system.advise\x00') open_by_handle_at(r2, &(0x7f00000003c0)={0xa, 0x1, "0109"}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000400)=0x7, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00'], 0x8) 03:39:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0xffffffffffffffff, 0x4, {{0x2, 0x2, 0x5, 0x6, 0x1, 0x37, {0x6, 0x0, 0x80, 0xf4d8, 0x200, 0x9, 0xffffffff, 0x5, 0x5, 0x100, 0x1, r1, r2, 0x1, 0x100000000}}, {0x0, 0x1}}}, 0xa0) 03:39:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x8, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @local, 0x70451895}, {0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, [], 0x1e}, 0x7}, 0x7fffffff, [0x22, 0x4, 0x8, 0x7, 0x8, 0x8, 0x7, 0x6]}, 0x5c) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000000c0)) r3 = dup2(r2, r0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e23, 0x7, @mcast1, 0x1}, {0xa, 0x4e24, 0x1f, @local, 0xffffffffffffffb0}, 0x5, [0x96, 0x6, 0x8000, 0x6, 0x6, 0x4, 0xb5a000000000, 0x9]}, 0x5c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x6d, 0x0, &(0x7f0000000140)="93ebbeaa4a84e84114c3dd39268521ae92240351628f26d13107c89bccdb12608d5101a6c9115dda1175013bb30c9b8a47de8a5f670ec9e1021c973b53a7e057bf7c8995805b1282d934af4b9cfda6a3398ba53b872ebda499d0efb7b7299901b29a001b652a13eec4f0010000"}) openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x4400, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)="00000000000000000000000000d1c15b5d5d3b77ffa30dc2267a347997f31ac373377a25740c63421546bd8c33") 03:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8b0000006f01000a00020100000008000000000000002201000000010000000000000040040000000100000000000000010400000001000000000000000803000000020000000000000092010000000500000000000000090400000005000000000000001400000000020000000000000022030000000400000000000000000000000002000000000000005017d5dc8bf34567a41b5f9f5c1bfc74775f013bb77b71c18bf5a78cf5352b1eee1788aac4f39ce6ee54e598e31644012ddaeb463b635b67d0c885afaaf8"], 0x8b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000300)=""/167) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="b278f308eee7c55079fd1f7eaeb5c806a600340000000000000000d036563f000000089d872ed7dc9a495cc74844c0ef68bbd3da1e5d3ca5532b8c5c20652be078db9cda84057ebac3a558bb6e9c5038"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380), 0x0, 0x0) alarm(0x401) 03:39:57 executing program 2: r0 = socket(0x400000000000010, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000140)={0x3, 0x8, 0x7, 0x2}, 0x10) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0x20) renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x5) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) 03:39:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x900000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfffffdfd) [ 571.646831] binder: 9898:9906 unknown command 1074291482 [ 571.678148] binder: 9898:9906 ioctl c0306201 20000200 returned -22 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8e090000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x410, 0x95, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 03:39:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x6000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85714070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000001000000000000004100000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000009600000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="6b7064119fa4cda6"]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) 03:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) 03:39:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) 03:39:57 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) ioctl$FICLONE(r0, 0x40049409, r0) [ 571.741684] binder: 9898:9916 unknown command 1074291482 [ 571.775769] binder: 9898:9916 ioctl c0306201 20000200 returned -22 03:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x12}) 03:39:57 executing program 2: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) r3 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000000c0)='\\^wlan1em0mime_type\x00') bind$llc(r0, &(0x7f0000000140)={0x1a, 0x33d, 0x60, 0x8000, 0x2, 0x4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x3c8, 0x0, 0x180, 0x0, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@srh={0x30, 'srh\x00', 0x0, {0xff, 0x400, 0xc8, 0x1, 0x0, 0x2040, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 0x4e21, 0x4e23, 0x4e24, 0x4e23, 0x3, 0x7, 0x3, 0xffff, 0x3}}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x2, 0x7, 0x1, [0x4, 0x5, 0xe1eb, 0x2, 0x5, 0x8, 0x7ff, 0x100, 0x3, 0x3f, 0x80000000, 0x0, 0x200, 0x5, 0x8bd, 0x1], 0x10}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x3b, 0x903, 0x6, 'netbios-ns\x00', 'syz1\x00', 0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 03:39:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x2000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:57 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) r1 = msgget(0x1, 0x48) msgctl$IPC_RMID(r1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xba02, 0x3f, 0x6, 0xfd2, 0x0, 0x7, 0x24000, 0xe, 0x1, 0xfffffffffffffffb, 0x9, 0x4, 0x80000000, 0x5291, 0x8, 0x4, 0x1, 0x101, 0x86eb, 0x40, 0x4, 0x3, 0xbe99, 0x0, 0x0, 0x0, 0x100000001, 0x8, 0x8, 0x3, 0x0, 0x6, 0x7ff, 0x1, 0x5, 0x7858, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x8000, 0x1092, 0x1, 0x5, 0x4, 0x10000}, r2, 0x3, r0, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x1}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000000140)={0x9, 0x7, 0x2}, 0x9) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="106308343700000000000000"], 0x0, 0x0, &(0x7f0000000240)}) fcntl$getown(r3, 0x9) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000002c0)=""/5) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000001340)=0x5cf1d8b0, 0xffffffff80000001, 0x7) uname(&(0x7f0000000340)=""/4096) 03:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000200)=0xeb8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000180)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="29af"], 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) 03:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3a000000) 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 572.100474] device lo entered promiscuous mode 03:39:57 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000380)="2134f3b3572b2b142d777fb08a0d4c7e2acc85ea168efd82c29515e8518d880e587e8cde29572fe48a11fae263a014612eb8bd3b97d30bf67e162ca30650a0ba3ff739995c222809e96b8137f561244b1ec2cf949339e4fa69911360ea95808c1464", 0x62, 0x20000000, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='veth1_to_team\x00') setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0)=0x10000, 0x2ce) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x8000, 0x18}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000680)={'filter\x00', 0x0, 0x4, 0x52, [], 0x3, &(0x7f00000005c0)=[{}, {}, {}], &(0x7f0000000600)=""/82}, &(0x7f0000000700)=0x78) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000580)=0x4) r3 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x4, 0x400000) ioctl$VT_ACTIVATE(r3, 0x5606, 0x58ff) fcntl$setpipe(r1, 0x407, 0x5) syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x40000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) listen(r1, 0xfff) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000540)=0xff, 0x4) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000004c0)={0x7f, 0x2, {0x2, 0x2, 0x92, 0x3, 0x83fe}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x60) getpeername$packet(r4, &(0x7f0000000140), &(0x7f0000000180)=0x14) listen(r0, 0x0) 03:39:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 572.127131] binder: 9967:9975 unknown command 872964880 [ 572.135080] binder: 9967:9975 ioctl c0306201 20000300 returned -22 [ 572.152635] binder: 9967:9975 unknown command 872964880 [ 572.159152] binder: 9967:9975 ioctl c0306201 20000300 returned -22 [ 572.168610] QAT: Invalid ioctl [ 572.172884] QAT: Invalid ioctl 03:39:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10890eacc5f379000000"], 0x0, 0x0, &(0x7f0000000240)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20140, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) 03:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='\x00'}, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="413a19e041bc494125790876c6cb40e1162b7620411d474851d592cdf0d0b9a9eb655d6525b5a194d133d6a58e13ad47", 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) socketpair(0x5, 0x3, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r5, 0x141}}, 0x18) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 572.179384] QAT: Invalid ioctl [ 572.187453] QAT: Invalid ioctl 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x600], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 572.318139] binder: 9999:10008 unknown command -1408333552 [ 572.349648] binder: 9999:10008 ioctl c0306201 20000300 returned -22 03:39:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) 03:39:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:58 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x200000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x602000, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x7c, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x7bc87ecd9566b4ec, 0x0, &(0x7f0000000440)="8dab85e88d074404841e6c125341f69dfd5c752fd893d509f839a877dd1e4205bc0fdfabb18731ccd8bc12d1c24152ee5fbf7fef6de48b8822874406264d2f207c553b82672176621fa4a4b929640ec6fcb016bae818cbae50f4f85cd8a759b961a1bb0a2bd3640acb9bb180810ffc7264423e929905667ae1da92bc5271e5e7"}) [ 572.401899] binder: 9999:10013 unknown command -1408333552 [ 572.430985] binder: 9999:10013 ioctl c0306201 20000300 returned -22 03:39:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000004, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8901, &(0x7f0000000000)='em1:\x00') 03:39:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x300], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:58 executing program 7: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x12}, 0x101}}, 0x2, 0x100000000, 0x0, 0x5b34, 0x1}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x22db, 0x4, 0xff, 0x0, 0x4836}, &(0x7f0000000180)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8000, 0xe5, 0x800}, 0x1c) 03:39:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9701]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 572.579997] binder: 10032:10036 unknown command 808464432 03:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3a00) 03:39:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) 03:39:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xa00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xb8, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @acquire={0x40046305, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)=[@ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x1, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x11}], &(0x7f0000000280)=[0x38, 0x20, 0x38]}}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000480)=[@fda={0x66646185, 0x2, 0x3, 0x14}], &(0x7f00000004c0)=[0x38]}}], 0x0, 0x0, &(0x7f0000000240)}) 03:39:58 executing program 7: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xc86, 0x4, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000, 0x4}, {&(0x7f00000010c0)="35fbbf6a87c07ed779360e5b7f567616317bc1101c4cb502430b07a50cca1bb9d0ef7c11fdd979e9619cdeae36b4bad04b14e3489b7b5774d52d785be4e85308e6b822c406bf091d58a5db8821f505f3c944f284e14ba460bca7482af17254f659b6495940d4f32fbed489d2a77e8f2b3022f42a657cb32fe20be225ff0a25a067770188a77fe0adebd5ff9a8d7c83", 0x8f, 0x1}, {&(0x7f0000001180), 0x0, 0xfffffffffffffffc}, {&(0x7f00000011c0)="dcacb535f920676cae7f06e45d1d523e087b7b03200ee5d69eb130fa4c5ff58e0a3b0eb25313d712c3631aae9e3bd20b5140ab238aeb18c4afc234dabece4087bfc60feedb8f9fb5094135de21515af938772b2a0cbaeec636ca31233c1879a89b4d0b175706a016978b6aba015a8dc77bd7bae8a7eff07416c21a617a835db3301c8affa9583cb6d612421d46bd19bdc46d37f44678174ece0c9959ddb452e9ba746edb709fcab749587ce62ef9dec82cd198f742f900cb8d35795a", 0xbc, 0xfffffffffffffffc}], 0x0, &(0x7f0000001300)={[{@fmask={'fmask', 0x3d, 0x4}}, {@disable_sparse_no='disable_sparse=no'}, {@errors_recover='errors=recover'}, {@umask={'umask', 0x3d, 0x80000001}}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000040), 0x3) [ 572.623018] binder: 10032:10036 ioctl c0306201 200002c0 returned -22 [ 572.648578] binder: 10032:10043 unknown command 808464432 [ 572.654661] binder: 10032:10043 ioctl c0306201 200002c0 returned -22 03:39:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000025bd7000fcdbdf2511000000080006000300000020000100080004004e2400001400030000003fa2000000391d000000000000f007000500f3f1ffff0800040041070000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000850}, 0xc0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x200000000000007f, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) [ 572.795607] binder: 10065:10072 BC_FREE_BUFFER u0000000000000000 no match [ 572.810730] ntfs: (device loop7): parse_options(): Unrecognized mount option . 03:39:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfffffffffffff000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x101100, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x8, 0x12) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x111800) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) [ 572.864204] ntfs: (device loop7): parse_options(): Unrecognized mount option . [ 572.865622] binder: 10065:10072 BC_FREE_BUFFER u0000000000000000 no match [ 572.878613] binder: 10065:10072 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 572.886404] binder: 10065:10072 Acquire 1 refcount change on invalid ref 4 ret -22 [ 572.894218] binder: 10065:10072 got transaction to invalid handle [ 572.900558] binder: 10065:10072 transaction failed 29201/-22, size 80-24 line 2852 [ 572.914499] binder: 10065:10072 BC_FREE_BUFFER u0000000000000000 no match [ 572.921871] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.927700] binder: 10065:10072 BC_FREE_BUFFER u0000000000000000 no match [ 572.934774] binder: 10065:10072 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 572.942556] binder: 10065:10072 Acquire 1 refcount change on invalid ref 4 ret -22 [ 572.950351] binder: 10065:10072 got transaction to invalid handle [ 572.956662] binder: 10065:10072 transaction failed 29201/-22, size 80-24 line 2852 03:39:58 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x64}, 0xc) 03:39:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffdef) [ 573.036341] binder: undelivered TRANSACTION_ERROR: 29201 03:39:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9effffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7401) 03:39:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x50000000000c9, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="12000000a96e2f20b1c1f95b7f66900959a28043dfef9c00792ed129de3ca477f066"], &(0x7f00000000c0)=0x1a) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e24, 0x3, @empty, 0x80000000}}}, 0x84) 03:39:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x300000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2013, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x88, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1063084000000000000000002f1c0ccb70d7a4aaa85df401bd8215ce5c14d568205169308c751362ed329b1f55fd6b1f23eddea8e33f137dc09cd4e8aa80d0a76e3b45ef77aabab08b9f44258653566c105a0eaeb75f23a3f732d0b7b944cbf0dca63ea683496eca4f93b01e1d368547b3da614aeddf5bb29294fcaf00000000e22a7171f7b81cac"]}) 03:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:39:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 573.376021] binder: 10127:10132 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 573.383625] binder: 10127:10132 unknown command -888398801 03:39:59 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @multicast1, 0x0}, &(0x7f0000000040)=0xc) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={r1, 0x7, 0x101, 0x1, 0x2, 0x783386e4, 0x4f00000000000000}) clock_getres(0x2, &(0x7f0000001240)) [ 573.445240] binder: 10127:10132 ioctl c0306201 20000300 returned -22 03:39:59 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x400000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000301ff8), 0xffffffff) 03:39:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xcc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r1}, @transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000140)=[@fda={0x66646185, 0x2, 0x4, 0x1b}, @flat={0x77622a85, 0x4df6aa6ed7ac9df9, r2, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x23}], &(0x7f00000000c0)=[0x38]}}, @clear_death={0x400c630f, 0x1, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000200), &(0x7f0000000240)=[0x38, 0x0, 0x28, 0x0, 0x78, 0x68, 0x48, 0x68, 0x0]}, 0x80000000}}, @exit_looper, @acquire, @enter_looper, @register_looper, @exit_looper, @acquire], 0xa9, 0x0, &(0x7f0000000440)="1b8d365d4bd9b81fdcf4425d79025ce6a1155d3f5ea518eaaad5d907e08fc5e9242a43507a157a9266dbb209b34aedda525efeed3c87ce876750f312f3b18e3ae30f906c0e26a44b8b1f4bcd6a980435fb155c5cb3a91f5e1f2534dfd8d5042d3442d090f62feec5877f8db7aefb33d5119dc2976532d7ec7d0c04c8b37215a24b896b41aef9c5121b46ad9a315cb5e6dbed2bd4b0ea7638649f390c0af906fa3c842284185d87fe72"}) 03:39:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0010015) [ 573.770081] binder: 10164:10170 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 573.806938] binder: 10164:10170 BC_FREE_BUFFER u0000000000000000 no match [ 573.814246] binder: 10164:10170 got transaction to invalid handle [ 573.820696] binder: 10164:10170 transaction failed 29201/-22, size 88-8 line 2852 [ 573.831640] binder: 10164:10174 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 573.842891] binder: 10164:10174 BC_FREE_BUFFER u0000000000000000 no match [ 573.849926] binder: 10164:10174 got transaction to invalid handle [ 573.857008] binder: 10164:10174 transaction failed 29201/-22, size 88-8 line 2852 03:39:59 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf0ffffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0000101) 03:39:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:59 executing program 2: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6(0xa, 0x8000f, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0xfffffffffffff327, 0x2, 0x5c6, 0xff, 0x40, 0x6, 0xfff, 0x5, 0x1, 0xfffffffffffffff8, 0x3, 0x1, 0x1, 0xfff, 0x7ff]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r1, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xfffffffffffffff8, @local, 0xfff}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000200)=0x10) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x88042, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x2000) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000280)) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 03:39:59 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000301ff8), 0xffffffff) 03:39:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x48) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x1}, 0x7}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:39:59 executing program 7: timerfd_create(0x9, 0x20800) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x10}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) exit_group(0x7) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) [ 574.064953] binder: 10192:10198 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 574.084161] binder: 10192:10202 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:39:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:39:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:39:59 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x4}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5cb2bd00000008000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 03:39:59 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfffff000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:39:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)}) fcntl$addseals(r0, 0x409, 0x0) 03:39:59 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000180)={0x14, 0x1, 0xb0302ae1f9c92e07, 0xfffffffffffbffff}, 0xfffffffffffffea8}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x4000) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x6, 0x8, 0x1, "efdf6fe45dca1aa643e353455774a97372dd9613d9d6ee20bb238cb014e97ddc891cdd9e9b8861cdf30164888b0b0cf3914721676d47a131f609460e033116", 0x21}, 0x60) exit(0x3) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21}}, 0x8, 0x3ff, 0x4, "394fc1aa44c896c5eaf1593dab4de03ddee60f67451a276da5e0f872ed28ff05b50c141932360ea65396fc7f20595eaf408a12e9aaca44aca7fc32fe01102f79632331e28a17c22c61b47c7951a4df97"}, 0xd8) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=""/138, 0x8a) 03:39:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000002) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x2}) lookup_dcookie(0x100, &(0x7f0000000300)=""/254, 0xfe) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c0) 03:39:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') socket$kcm(0x29, 0x5, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000301ff8), 0xffffffff) 03:39:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r1, &(0x7f0000000480)=""/126, 0x7e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xcf, "47603ae77d76eaea5f0039d3e5d152704e2524e9e639ea50c42889af42ee42e63ae8b3f1016f6a8b9f0a1bba2c00a4f644257a37c7c0793407bcfe680470d76459806e19bb2a76f2873c8763a928c3b4ae5af80e7094b5c50e5db33984d4420250e09b2389d864c87c72571d597f4f2b88451bf0688096d97e62f6356f0894a0611fa69b3f60bf9dfe49f1e86400d924014778bd32e6edf5a199069fe93260676469e8d72181cb256bc627cc9878fa68f665cfe2fb1fa12f3d0c1b87127e562017b5cb31cd16c298ecd417c395eb9c"}, &(0x7f00000002c0)=0xd7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x31a, 0x4}, 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e23, 0xffffffff, @loopback, 0x5}, {0xa, 0x4e20, 0x7fffffff, @local, 0xff}, 0xae, [0x2, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x8]}, 0x5c) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x104, 0x0, &(0x7f0000000340)="95713d6d856751170d4b7c65db1ba5803b83119801552ba3610ae4a1cb16820ddf8e5086e0ddedbc896273b17dd03461dd55df7786d58cb8bd0e4778f40262a26daf619e88843dbae9f6b3a502c12ec7ccdd42161008005e4cfabf0c03e0e782f433cbc225146b61153d97ced2b736d1e033f0556986cf1398f4c60ab4c85f9064e81c9f307128bfe0958f2c619957f02f12f466fa7e2087a188ac0a00bb1298c36af98f0d085904ea3afad9150cbbf4abbb968a9efa454ec554ee2507aca8f48b263a6fcd6b3212655832489fb0728584b8f03d52594763ba1101262c4243db8d30ab9043be687c2d9dc5979f1ee93df9b04a208d04c2848986807ce2d1285283528c9a"}) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x40, {0x7d, 0x3, 0x4}, 0x2, r4, r5, 0x4, 0x100, 0x7, 0x8, 0x4, 0x8001, 0x9, 0x100000001, 0x400000000000, 0x7f, 0xf56, 0xf1, 0x5, 0xa, 0x1}}, 0xa0) 03:39:59 executing program 2: r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) setsockopt$inet_buf(r1, 0x0, 0x3d, &(0x7f0000000140)="5e3ca5a3542006ccecf6002ec11b6227", 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8414, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xffffffffffffff01, 0x6, '9P2000'}, 0x13) write$P9_RRENAME(r2, &(0x7f0000000080)={0x1e8, 0x15, 0x1}, 0xfffffffffffffd6c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x11b, 0x32, &(0x7f0000002340)=r3, 0x4) 03:40:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf0ffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 574.601113] binder: 10255:10262 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000400)={0x5e, 0x7d, 0x2, {{0x0, 0x40, 0x8, 0x393, {0x20, 0x4}, 0x0, 0x3, 0x1, 0x3, 0x1, '^', 0x2, '+:', 0x9, '/dev/kvm\x00', 0x1, '$'}, 0x9, '/dev/kvm\x00', r3, r4, r5}}, 0x5e) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd9010000) 03:40:00 executing program 6: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r0 = socket$kcm(0x29, 0x5, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000301ff8), 0xffffffff) 03:40:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r3) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x3, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x34}}, 0x0) 03:40:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x9000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf00000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:00 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x80000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x6, 0x40, 0x6}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="2f45c0365c59a4eb84f197afdd1c82ec", 0x10) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 574.676125] binder: 10255:10265 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 574.863995] binder: 10275:10285 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f00000002c0)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffff939a, 0x12000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x401, 0x7, 0x3, 0x8b, 0x4, 0x7fffffff, 0xf8, 0x3ff, 0x1, 0x20400, 0x2, 0x200}) read(r0, &(0x7f0000000380)=""/42, 0xf0) [ 574.936842] binder: 10275:10293 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:00 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@loopback, @multicast2, @multicast2}, &(0x7f0000000080)=0xc) 03:40:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 03:40:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xffffff7f], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x6001) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2a1001c0) 03:40:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) 03:40:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev}, 0x10) listen(r0, 0x7ff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r1, 0x7) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240), 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote, @local, @remote, 0x5ed, 0x4, 0x1, 0x100, 0x7, 0x20000000000110}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r1, 0x0, 0x8, 0x8, 0x3e85}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @local}, 0xc) listen(r0, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e20, @remote}}) [ 575.249079] binder: 10309:10317 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 575.273571] binder: 10309:10324 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 03:40:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8e090000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x420480, 0x0) 03:40:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x1000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:01 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x84, 0x200000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="e4ee45275b39233c7fa37f3616e45975567008bce4767b4ba66c8676eefa5284f7464a8933c01c21454e5cd0cb44d67a59b9b930443561d12db3634545444f36392d8ebe3d17283aee906a4a94a1a0e74b1406c98e838a829114d722614c0789a4", &(0x7f0000000200)="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", 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x82, 0x20000000008, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="df67bb3ebb"], 0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r3, 0x611, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff08f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0x0) 03:40:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 575.533769] binder: 10345:10346 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 575.560398] binder: 10345:10348 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x8000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet_dccp_buf(r1, 0x21, 0xcf, &(0x7f00000000c0)="468cc62e0290d27218be1c3d65e98852796ae9675519e8632d34907f5f4466529690f3fafbcbaab86c53fbc265eee3eabf050a65c160740f4737ef20ffb3aee454e922dc388c77331c4ba55ad120704014b5407271b041432b882c6523c3abdf76f86fc5cf37e99f4f60529080a8b3d2448f4a852b6b94af6ff23a89beda771f4d7c1892bc3c1c26355c4d7e0f8845c59e169e9b2679e1032efe0d06768d21e9555c25eceed303c8a6d12bc6daec2e1ad18b3b8e52d6b29d19e2d0", 0xbb) 03:40:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x84000001, 0x3342, &(0x7f0000000300)=""/187}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) [ 575.740013] binder: 10362:10365 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:01 executing program 6 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe006) [ 575.792958] binder: 10362:10369 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = dup2(r1, r0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="dc2d7734b5dc00d3d4435ed3cca84a0beecf499eef", 0x15) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb34fd"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) setresuid(r5, 0x0, 0x0) ioprio_set$uid(0x3, r5, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 575.978532] FAULT_INJECTION: forcing a failure. [ 575.978532] name failslab, interval 1, probability 0, space 0, times 0 [ 575.989874] CPU: 1 PID: 10383 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 575.997252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.007121] Call Trace: [ 576.009720] dump_stack+0x1c9/0x2b4 [ 576.013374] ? dump_stack_print_info.cold.2+0x52/0x52 [ 576.018592] ? trace_hardirqs_on+0x10/0x10 [ 576.022856] ? trace_hardirqs_on+0x10/0x10 [ 576.027131] should_fail.cold.4+0xa/0x1a [ 576.031746] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.036873] ? trace_hardirqs_on+0x10/0x10 [ 576.041131] ? find_held_lock+0x36/0x1c0 [ 576.045223] ? check_same_owner+0x340/0x340 [ 576.049558] ? rcu_note_context_switch+0x730/0x730 [ 576.054499] __should_failslab+0x124/0x180 [ 576.058747] should_failslab+0x9/0x14 [ 576.063047] kmem_cache_alloc_trace+0x2cb/0x780 [ 576.067734] ? kasan_check_read+0x11/0x20 [ 576.071893] alloc_pipe_info+0x175/0x5a0 [ 576.075962] ? pipe_read+0x940/0x940 [ 576.079687] ? __fget+0x414/0x670 [ 576.083151] ? expand_files.part.8+0x9c0/0x9c0 [ 576.087741] ? find_held_lock+0x36/0x1c0 [ 576.091818] splice_direct_to_actor+0x6fc/0x8f0 [ 576.096495] ? fsnotify+0xbb4/0x14e0 [ 576.100778] ? pipe_to_sendpage+0x400/0x400 [ 576.105124] ? do_splice_to+0x190/0x190 [ 576.109115] ? rw_verify_area+0x118/0x360 [ 576.113280] do_splice_direct+0x2d4/0x420 [ 576.117447] ? splice_direct_to_actor+0x8f0/0x8f0 [ 576.122309] ? rw_verify_area+0x118/0x360 [ 576.126483] do_sendfile+0x623/0xe20 [ 576.130729] ? do_compat_pwritev64+0x1c0/0x1c0 [ 576.135346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.140894] ? _copy_from_user+0xdf/0x150 [ 576.145059] __x64_sys_sendfile64+0x15d/0x250 [ 576.149660] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 576.154252] ? ksys_ioctl+0x81/0xd0 [ 576.157888] ? do_syscall_64+0x9a/0x820 [ 576.162362] do_syscall_64+0x1b9/0x820 [ 576.166263] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.171217] ? syscall_return_slowpath+0x31d/0x5e0 [ 576.176158] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 576.181534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.186387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.191577] RIP: 0033:0x457089 [ 576.195287] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.214707] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.222426] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 576.230146] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 576.237420] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 576.244688] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 576.252047] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000000 03:40:01 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3ff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000027c0), 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="6f2c6e6c733d638ce7ac052c00"]) 03:40:01 executing program 0: r0 = getpid() ptrace(0x10, r0) getpgid(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c4514ad7c853d0854b86a054b7119ea4d2ca80f4f43b84867986d1396496d955d54e5cdd75e7b50f7f5651db229e118c79ea4e2d959b143cf5a6f7e93f6396d493fb34cd01efe3f1170ccca9c026e33ae4582460f815b17a4c6926b16155fb708e94d2d517ecfc3646d306567dd23d30f235897d7cc121b0067eadb25b1e442580b071a23c1ee89003ebf4b182b6523f2e2ac4a889d5fb26e8486a32bef715ed957b123935ff2e1746598d840253fd13bdecc424daf7534ebdd3a43944fd58db1b6b311212c1d0ad7e4e1ab3528056d1478b42c863"], 0x1aa, 0x0, &(0x7f0000000000)="c29fa0876cf9b5820d48e4a8f3a8a8f682dc2b66b94e4c464b91117c"}) 03:40:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3f00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x8000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet_dccp_buf(r1, 0x21, 0xcf, &(0x7f00000000c0)="468cc62e0290d27218be1c3d65e98852796ae9675519e8632d34907f5f4466529690f3fafbcbaab86c53fbc265eee3eabf050a65c160740f4737ef20ffb3aee454e922dc388c77331c4ba55ad120704014b5407271b041432b882c6523c3abdf76f86fc5cf37e99f4f60529080a8b3d2448f4a852b6b94af6ff23a89beda771f4d7c1892bc3c1c26355c4d7e0f8845c59e169e9b2679e1032efe0d06768d21e9555c25eceed303c8a6d12bc6daec2e1ad18b3b8e52d6b29d19e2d0", 0xbb) 03:40:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffff0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:01 executing program 6 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) [ 576.397590] binder: 10400:10404 unknown command -682995260 [ 576.432762] FAULT_INJECTION: forcing a failure. [ 576.432762] name failslab, interval 1, probability 0, space 0, times 0 03:40:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x10000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/177) r2 = fcntl$dupfd(r0, 0x0, r0) connect(r2, &(0x7f0000000000)=@ethernet={0x307, @broadcast}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 03:40:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000000001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0xfffffffffffffe8e) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x880) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 576.444121] CPU: 1 PID: 10409 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 576.451502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.458606] binder: 10400:10404 ioctl c0306201 20000300 returned -22 [ 576.461370] Call Trace: [ 576.461398] dump_stack+0x1c9/0x2b4 [ 576.461427] ? dump_stack_print_info.cold.2+0x52/0x52 [ 576.461451] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 576.461474] ? __save_stack_trace+0x8d/0xf0 [ 576.461507] should_fail.cold.4+0xa/0x1a [ 576.461533] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:40:02 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x900], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 576.498176] ? save_stack+0x43/0xd0 [ 576.501811] ? kasan_kmalloc+0xc4/0xe0 [ 576.505710] ? kmem_cache_alloc_trace+0x152/0x780 [ 576.510562] ? alloc_pipe_info+0x175/0x5a0 [ 576.514813] ? splice_direct_to_actor+0x6fc/0x8f0 [ 576.519684] ? do_sendfile+0x623/0xe20 [ 576.523587] ? __x64_sys_sendfile64+0x15d/0x250 [ 576.528270] ? do_syscall_64+0x1b9/0x820 [ 576.532356] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.538283] ? find_held_lock+0x36/0x1c0 [ 576.542396] ? check_same_owner+0x340/0x340 [ 576.546720] ? rcu_is_watching+0x8c/0x150 [ 576.550875] ? rcu_note_context_switch+0x730/0x730 [ 576.555818] __should_failslab+0x124/0x180 [ 576.560075] should_failslab+0x9/0x14 [ 576.563898] __kmalloc+0x2c8/0x760 [ 576.567441] ? kmem_cache_alloc_trace+0x616/0x780 [ 576.572304] ? alloc_pipe_info+0x2a8/0x5a0 [ 576.576561] alloc_pipe_info+0x2a8/0x5a0 [ 576.580630] ? pipe_read+0x940/0x940 [ 576.584369] ? __fget+0x414/0x670 [ 576.588370] ? expand_files.part.8+0x9c0/0x9c0 [ 576.594157] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 576.601267] splice_direct_to_actor+0x6fc/0x8f0 [ 576.605943] ? fsnotify+0xbb4/0x14e0 [ 576.609663] ? pipe_to_sendpage+0x400/0x400 [ 576.613999] ? do_splice_to+0x190/0x190 [ 576.617988] ? rw_verify_area+0x118/0x360 [ 576.622613] do_splice_direct+0x2d4/0x420 [ 576.626773] ? splice_direct_to_actor+0x8f0/0x8f0 [ 576.631646] ? rw_verify_area+0x118/0x360 [ 576.635813] do_sendfile+0x623/0xe20 [ 576.639543] ? do_compat_pwritev64+0x1c0/0x1c0 [ 576.644148] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.649693] ? _copy_from_user+0xdf/0x150 [ 576.653852] __x64_sys_sendfile64+0x15d/0x250 [ 576.658853] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 576.663446] ? ksys_ioctl+0x81/0xd0 [ 576.667079] ? do_syscall_64+0x9a/0x820 [ 576.671069] do_syscall_64+0x1b9/0x820 [ 576.674968] ? finish_task_switch+0x1d3/0x870 [ 576.679472] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.684497] ? syscall_return_slowpath+0x31d/0x5e0 [ 576.689906] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 576.695280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.700142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.705357] RIP: 0033:0x457089 [ 576.708541] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.728402] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.736119] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 03:40:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9701000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 576.743391] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 576.751150] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 576.758538] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 576.765941] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000001 03:40:02 executing program 6 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x84010000, &(0x7f0000000140)="bfdcfb22b4d644f57fd2808cc9ea21b402bb79cb60c597ad7c9a2f7e82aedd8a7256ffed1e34dd1066152d3d58d7c4f18abc0c2a8607ffff10735480ead81016c5345f62830d41a158a0dbd699f93e5c5c40e3fe869bc0223e4e954fc3", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000200)="901ac578f00d0839564b15d31054322bc20c1b31d7257e0fe150c51cd85c59c2619576318de40fddf524659795b0098a6250dba83dd2df6128c3063a9c99cf54fbc644185a614cb50dbe") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x7, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x400}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r2, 0x9f9}, &(0x7f00000003c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x186) [ 576.806568] binder: 10400:10414 unknown command -682995260 [ 576.822181] binder: 10400:10414 ioctl c0306201 20000300 returned -22 [ 576.917906] hfsplus: unable to parse mount options [ 576.938177] hfsplus: unable to parse mount options 03:40:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x100000001) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8000000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="90", 0x1}], 0x1, &(0x7f0000000940)}}, {{&(0x7f0000000a00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)="02", 0x1}], 0x1, &(0x7f0000001f00)}}], 0x2, 0x0) [ 577.102249] FAULT_INJECTION: forcing a failure. [ 577.102249] name failslab, interval 1, probability 0, space 0, times 0 [ 577.113622] CPU: 0 PID: 10447 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 577.121000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.130367] Call Trace: [ 577.132968] dump_stack+0x1c9/0x2b4 [ 577.136614] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.141817] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 577.146681] should_fail.cold.4+0xa/0x1a [ 577.150756] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 577.155874] ? trace_hardirqs_on+0x10/0x10 [ 577.160152] ? find_held_lock+0x36/0x1c0 [ 577.164256] ? check_same_owner+0x340/0x340 [ 577.168586] ? rcu_note_context_switch+0x730/0x730 [ 577.173570] __should_failslab+0x124/0x180 [ 577.177836] should_failslab+0x9/0x14 [ 577.181652] kmem_cache_alloc_node_trace+0x26f/0x770 [ 577.186778] __kmalloc_node+0x33/0x70 [ 577.190606] kvmalloc_node+0x65/0xf0 [ 577.194356] iov_iter_get_pages_alloc+0x7da/0x1530 [ 577.199302] ? kasan_check_read+0x11/0x20 [ 577.203475] ? iov_iter_fault_in_readable+0x460/0x460 [ 577.208663] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.213075] ? is_bpf_text_address+0xd7/0x170 [ 577.217579] ? kernel_text_address+0x79/0xf0 [ 577.221998] ? __kernel_text_address+0xd/0x40 [ 577.226520] ? unwind_get_return_address+0x61/0xa0 [ 577.231463] ? __save_stack_trace+0x8d/0xf0 [ 577.235807] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 577.240822] ? iov_iter_pipe+0xc2/0x2f0 [ 577.244803] default_file_splice_read+0x1da/0xb10 [ 577.249657] ? do_splice_direct+0x2d4/0x420 [ 577.253983] ? do_sendfile+0x623/0xe20 [ 577.257876] ? __x64_sys_sendfile64+0x15d/0x250 [ 577.262552] ? do_syscall_64+0x1b9/0x820 [ 577.266655] ? iter_file_splice_write+0x1010/0x1010 [ 577.271685] ? kasan_check_read+0x11/0x20 [ 577.275832] ? rcu_is_watching+0x8c/0x150 [ 577.279977] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.284400] ? __lockdep_init_map+0x105/0x590 [ 577.288909] ? lockdep_init_map+0x9/0x10 [ 577.292994] ? __mutex_init+0x1f7/0x290 [ 577.296993] ? rcu_pm_notify+0xc0/0xc0 [ 577.300916] ? __ia32_sys_membarrier+0x150/0x150 [ 577.305696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.311235] ? fsnotify+0xbb4/0x14e0 [ 577.314956] ? init_wait_entry+0x1c0/0x1c0 [ 577.319191] ? fsnotify_first_mark+0x350/0x350 [ 577.323774] ? fsnotify+0x14e0/0x14e0 [ 577.327592] ? security_file_permission+0x1c6/0x240 [ 577.332624] ? rw_verify_area+0x118/0x360 [ 577.336770] ? iter_file_splice_write+0x1010/0x1010 [ 577.341785] do_splice_to+0x12e/0x190 [ 577.345602] splice_direct_to_actor+0x270/0x8f0 [ 577.350306] ? pipe_to_sendpage+0x400/0x400 [ 577.354645] ? do_splice_to+0x190/0x190 [ 577.358631] ? rw_verify_area+0x118/0x360 [ 577.362798] do_splice_direct+0x2d4/0x420 [ 577.366957] ? splice_direct_to_actor+0x8f0/0x8f0 [ 577.371810] ? rw_verify_area+0x118/0x360 [ 577.375967] do_sendfile+0x623/0xe20 [ 577.379714] ? do_compat_pwritev64+0x1c0/0x1c0 [ 577.384343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.389887] ? _copy_from_user+0xdf/0x150 [ 577.394047] __x64_sys_sendfile64+0x15d/0x250 [ 577.398554] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 577.403138] ? ksys_ioctl+0x81/0xd0 [ 577.406761] ? do_syscall_64+0x9a/0x820 [ 577.410739] do_syscall_64+0x1b9/0x820 [ 577.414634] ? finish_task_switch+0x1d3/0x870 [ 577.419136] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.424071] ? syscall_return_slowpath+0x31d/0x5e0 [ 577.429008] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 577.434386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.439242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.444430] RIP: 0033:0x457089 [ 577.447619] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.467039] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.474756] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 577.482374] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 577.489644] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 577.496923] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 577.504223] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000002 [ 577.518062] binder: 10438:10451 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:03 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfffffffe], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) accept4(0xffffffffffffff9c, &(0x7f00000028c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002940)=0x80, 0x80000) bind$can_raw(r3, &(0x7f0000002980)={0x1d, r4}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:03 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xffffffffffffff90) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f00000000c0), 0x40) [ 577.608203] binder: 10438:10456 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:03 executing program 6 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7ec0762201cb6d99803e0000000000000001e59267ed3f928d461fc3196103b4a62f87e446f4"], 0x0, 0x0, &(0x7f0000000240)}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1}) 03:40:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9e) [ 577.829377] binder: 10475:10481 unknown command 578207870 [ 577.835878] FAULT_INJECTION: forcing a failure. [ 577.835878] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 577.847765] CPU: 1 PID: 10480 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 577.855144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.864512] Call Trace: [ 577.867612] dump_stack+0x1c9/0x2b4 [ 577.871269] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.876470] ? find_held_lock+0x36/0x1c0 [ 577.880550] should_fail.cold.4+0xa/0x1a [ 577.884629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 577.889746] ? kasan_check_read+0x11/0x20 [ 577.894442] ? rcu_is_watching+0x8c/0x150 [ 577.898611] ? find_held_lock+0x36/0x1c0 [ 577.902711] ? check_same_owner+0x340/0x340 [ 577.907043] ? rcu_note_context_switch+0x730/0x730 [ 577.912001] __alloc_pages_nodemask+0x36e/0xdb0 [ 577.916696] ? default_file_splice_read+0x1da/0xb10 [ 577.921721] ? do_splice_to+0x12e/0x190 [ 577.925703] ? splice_direct_to_actor+0x270/0x8f0 [ 577.934387] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 577.939441] ? rcu_pm_notify+0xc0/0xc0 [ 577.943378] ? __kmalloc_node+0x33/0x70 [ 577.947363] ? __kmalloc_node+0x33/0x70 [ 577.951835] ? rcu_read_lock_sched_held+0x108/0x120 [ 577.956868] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 577.962422] alloc_pages_current+0x10c/0x210 [ 577.967304] push_pipe+0x400/0x7a0 [ 577.970881] ? __kmalloc_node+0x47/0x70 [ 577.974878] iov_iter_get_pages_alloc+0x866/0x1530 [ 577.979834] ? iov_iter_fault_in_readable+0x460/0x460 [ 577.985035] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.989469] ? is_bpf_text_address+0xd7/0x170 [ 577.993979] ? kernel_text_address+0x79/0xf0 [ 577.998871] ? __kernel_text_address+0xd/0x40 [ 578.003387] ? unwind_get_return_address+0x61/0xa0 [ 578.008340] ? __save_stack_trace+0x8d/0xf0 [ 578.012696] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.017721] ? iov_iter_pipe+0xc2/0x2f0 [ 578.021717] default_file_splice_read+0x1da/0xb10 [ 578.026576] ? do_splice_direct+0x2d4/0x420 [ 578.030908] ? do_sendfile+0x623/0xe20 [ 578.035351] ? __x64_sys_sendfile64+0x15d/0x250 [ 578.040033] ? do_syscall_64+0x1b9/0x820 [ 578.044131] ? iter_file_splice_write+0x1010/0x1010 [ 578.049183] ? kasan_check_read+0x11/0x20 [ 578.053349] ? rcu_is_watching+0x8c/0x150 [ 578.057514] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 578.062306] ? __lockdep_init_map+0x105/0x590 [ 578.066827] ? lockdep_init_map+0x9/0x10 [ 578.070904] ? __mutex_init+0x1f7/0x290 [ 578.075055] ? rcu_pm_notify+0xc0/0xc0 [ 578.078961] ? __ia32_sys_membarrier+0x150/0x150 [ 578.083740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.089286] ? fsnotify+0xbb4/0x14e0 [ 578.093028] ? init_wait_entry+0x1c0/0x1c0 [ 578.097276] ? fsnotify_first_mark+0x350/0x350 [ 578.102363] ? fsnotify+0x14e0/0x14e0 [ 578.106224] ? security_file_permission+0x1c6/0x240 [ 578.111272] ? rw_verify_area+0x118/0x360 [ 578.115449] ? iter_file_splice_write+0x1010/0x1010 [ 578.120483] do_splice_to+0x12e/0x190 [ 578.124798] splice_direct_to_actor+0x270/0x8f0 [ 578.129496] ? pipe_to_sendpage+0x400/0x400 [ 578.133848] ? do_splice_to+0x190/0x190 [ 578.137846] ? rw_verify_area+0x118/0x360 [ 578.142022] do_splice_direct+0x2d4/0x420 [ 578.146205] ? splice_direct_to_actor+0x8f0/0x8f0 [ 578.151085] ? rw_verify_area+0x118/0x360 [ 578.155273] do_sendfile+0x623/0xe20 [ 578.159504] ? do_compat_pwritev64+0x1c0/0x1c0 [ 578.164133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.169690] ? _copy_from_user+0xdf/0x150 [ 578.173859] __x64_sys_sendfile64+0x15d/0x250 [ 578.178382] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 578.183003] ? ksys_ioctl+0x81/0xd0 [ 578.186656] ? do_syscall_64+0x9a/0x820 [ 578.191172] do_syscall_64+0x1b9/0x820 [ 578.195087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.200053] ? syscall_return_slowpath+0x31d/0x5e0 [ 578.205034] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 578.210437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.215314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.220538] RIP: 0033:0x457089 [ 578.224198] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.243710] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.251453] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 578.259217] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 578.266500] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:40:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:03 executing program 2: r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r2 = dup3(r1, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000000)=0xb496) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7f, 0x40) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000c80)={@dev={0xfe, 0x80, [], 0xf}, 0x58, r3}) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x0) 03:40:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x600042, 0x12c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000000c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @rand_addr}, &(0x7f00000015c0)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001600)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, r2}, 0x14) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x9a2, 0x40) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000400)="66baf80cb844e75684ef66bafc0ced0f01cb360f200364360f3804f666b82b018ee8b805000000b9a7da00000f01d9b9850800000f320f141de051000066ba200066ed66b86c008ee0"}], 0x0, 0x0, &(0x7f00000002c0)=[@efer], 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="00010000000000006b9b1868b6"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xc0010140]}) [ 578.278263] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 578.285550] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000003 [ 578.310634] binder: 10475:10481 ioctl c0306201 20000300 returned -22 [ 578.323271] binder: 10475:10485 unknown command 578207870 03:40:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="102dad193e117424fa000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:03 executing program 6 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000140)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:03 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 578.331516] binder: 10475:10485 ioctl c0306201 20000300 returned -22 03:40:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 578.620439] FAULT_INJECTION: forcing a failure. [ 578.620439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.632518] CPU: 0 PID: 10506 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 578.639901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.649259] Call Trace: [ 578.651865] dump_stack+0x1c9/0x2b4 [ 578.655516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 578.660729] ? find_held_lock+0x36/0x1c0 [ 578.664816] should_fail.cold.4+0xa/0x1a 03:40:04 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) eventfd(0x2000000000000006) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) [ 578.668901] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 578.674026] ? kasan_check_read+0x11/0x20 [ 578.678195] ? rcu_is_watching+0x8c/0x150 [ 578.682367] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 578.686801] ? find_held_lock+0x36/0x1c0 [ 578.690908] ? check_same_owner+0x340/0x340 [ 578.695254] ? rcu_note_context_switch+0x730/0x730 [ 578.700217] __alloc_pages_nodemask+0x36e/0xdb0 [ 578.704914] ? default_file_splice_read+0x1da/0xb10 [ 578.709951] ? do_splice_to+0x12e/0x190 [ 578.713930] ? splice_direct_to_actor+0x270/0x8f0 [ 578.718785] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 578.723821] ? rcu_pm_notify+0xc0/0xc0 [ 578.727726] ? __kmalloc_node+0x33/0x70 [ 578.731705] ? __kmalloc_node+0x33/0x70 [ 578.735691] ? rcu_read_lock_sched_held+0x108/0x120 [ 578.740719] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 578.746266] alloc_pages_current+0x10c/0x210 [ 578.750695] push_pipe+0x400/0x7a0 [ 578.754242] ? __kmalloc_node+0x47/0x70 [ 578.758262] iov_iter_get_pages_alloc+0x866/0x1530 [ 578.763222] ? iov_iter_fault_in_readable+0x460/0x460 [ 578.768413] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 578.772833] ? is_bpf_text_address+0xd7/0x170 [ 578.777342] ? kernel_text_address+0x79/0xf0 [ 578.781765] ? __kernel_text_address+0xd/0x40 [ 578.786269] ? unwind_get_return_address+0x61/0xa0 [ 578.791212] ? __save_stack_trace+0x8d/0xf0 [ 578.795552] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.800573] ? iov_iter_pipe+0xc2/0x2f0 [ 578.804564] default_file_splice_read+0x1da/0xb10 [ 578.809417] ? do_splice_direct+0x2d4/0x420 [ 578.813740] ? do_sendfile+0x623/0xe20 [ 578.817630] ? __x64_sys_sendfile64+0x15d/0x250 [ 578.822298] ? do_syscall_64+0x1b9/0x820 [ 578.826381] ? iter_file_splice_write+0x1010/0x1010 [ 578.831408] ? kasan_check_read+0x11/0x20 [ 578.835563] ? rcu_is_watching+0x8c/0x150 [ 578.839714] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 578.844583] ? __lockdep_init_map+0x105/0x590 [ 578.849122] ? lockdep_init_map+0x9/0x10 [ 578.853192] ? __mutex_init+0x1f7/0x290 [ 578.857163] ? rcu_pm_notify+0xc0/0xc0 [ 578.861064] ? __ia32_sys_membarrier+0x150/0x150 [ 578.865824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.871361] ? fsnotify+0xbb4/0x14e0 [ 578.875080] ? init_wait_entry+0x1c0/0x1c0 [ 578.879328] ? fsnotify_first_mark+0x350/0x350 [ 578.883924] ? fsnotify+0x14e0/0x14e0 [ 578.887763] ? security_file_permission+0x1c6/0x240 [ 578.892790] ? rw_verify_area+0x118/0x360 [ 578.896947] ? iter_file_splice_write+0x1010/0x1010 [ 578.901974] do_splice_to+0x12e/0x190 [ 578.905789] splice_direct_to_actor+0x270/0x8f0 [ 578.910464] ? pipe_to_sendpage+0x400/0x400 [ 578.914800] ? do_splice_to+0x190/0x190 [ 578.918810] ? rw_verify_area+0x118/0x360 [ 578.922968] do_splice_direct+0x2d4/0x420 [ 578.927125] ? splice_direct_to_actor+0x8f0/0x8f0 [ 578.931978] ? rw_verify_area+0x118/0x360 [ 578.936132] do_sendfile+0x623/0xe20 [ 578.939871] ? do_compat_pwritev64+0x1c0/0x1c0 [ 578.944476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.950012] ? _copy_from_user+0xdf/0x150 [ 578.954178] __x64_sys_sendfile64+0x15d/0x250 [ 578.958689] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 578.963271] ? ksys_ioctl+0x81/0xd0 [ 578.966898] ? do_syscall_64+0x9a/0x820 [ 578.970882] do_syscall_64+0x1b9/0x820 [ 578.974774] ? finish_task_switch+0x1d3/0x870 [ 578.979269] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.984220] ? syscall_return_slowpath+0x31d/0x5e0 [ 578.989154] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 578.994524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.999376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.004567] RIP: 0033:0x457089 [ 579.007751] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.027171] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 579.034884] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 579.042152] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 579.049421] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 579.056700] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 579.063965] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000004 03:40:04 executing program 6 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000000) 03:40:04 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2c, 0x121301) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x54) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x400) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) ioctl$int_out(r2, 0x4140, &(0x7f0000000040)) 03:40:04 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:04 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)={0x3, "1b7691"}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x100, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000280)={0x8000, @remote}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x8b8}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r4, 0xdfe2}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 579.143109] binder: 10508:10518 unknown command 430779664 [ 579.155465] binder: 10508:10518 ioctl c0306201 20000300 returned -22 [ 579.163314] binder: 10508:10521 unknown command 430779664 [ 579.169463] binder: 10508:10521 ioctl c0306201 20000300 returned -22 [ 579.367302] FAULT_INJECTION: forcing a failure. [ 579.367302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.379356] CPU: 0 PID: 10536 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 579.386733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.396132] Call Trace: [ 579.398745] dump_stack+0x1c9/0x2b4 [ 579.402396] ? dump_stack_print_info.cold.2+0x52/0x52 [ 579.407644] ? find_held_lock+0x36/0x1c0 [ 579.411749] should_fail.cold.4+0xa/0x1a [ 579.415837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.420968] ? kasan_check_read+0x11/0x20 [ 579.425131] ? rcu_is_watching+0x8c/0x150 [ 579.429289] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 579.433729] ? find_held_lock+0x36/0x1c0 [ 579.437830] ? check_same_owner+0x340/0x340 [ 579.442177] ? rcu_note_context_switch+0x730/0x730 [ 579.447144] __alloc_pages_nodemask+0x36e/0xdb0 [ 579.451835] ? default_file_splice_read+0x1da/0xb10 [ 579.456864] ? do_splice_to+0x12e/0x190 [ 579.460857] ? splice_direct_to_actor+0x270/0x8f0 03:40:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x6d}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20000000, 0x40) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000180)=""/137, 0x89) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f0000000100), &(0x7f0000000080)=0x4) [ 579.465814] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 579.470867] ? rcu_pm_notify+0xc0/0xc0 [ 579.474782] ? __kmalloc_node+0x33/0x70 [ 579.478776] ? __kmalloc_node+0x33/0x70 [ 579.482773] ? rcu_read_lock_sched_held+0x108/0x120 [ 579.487820] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 579.493386] alloc_pages_current+0x10c/0x210 [ 579.497819] push_pipe+0x400/0x7a0 [ 579.501383] ? __kmalloc_node+0x47/0x70 [ 579.505392] iov_iter_get_pages_alloc+0x866/0x1530 [ 579.510386] ? iov_iter_fault_in_readable+0x460/0x460 [ 579.515583] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 579.520012] ? is_bpf_text_address+0xd7/0x170 [ 579.524528] ? kernel_text_address+0x79/0xf0 [ 579.528942] ? __kernel_text_address+0xd/0x40 [ 579.533443] ? unwind_get_return_address+0x61/0xa0 [ 579.538378] ? __save_stack_trace+0x8d/0xf0 [ 579.542718] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 579.547741] ? iov_iter_pipe+0xc2/0x2f0 [ 579.551731] default_file_splice_read+0x1da/0xb10 [ 579.556584] ? do_splice_direct+0x2d4/0x420 [ 579.560913] ? do_sendfile+0x623/0xe20 [ 579.564802] ? __x64_sys_sendfile64+0x15d/0x250 [ 579.569469] ? do_syscall_64+0x1b9/0x820 [ 579.573543] ? iter_file_splice_write+0x1010/0x1010 [ 579.578564] ? kasan_check_read+0x11/0x20 [ 579.582717] ? rcu_is_watching+0x8c/0x150 [ 579.586868] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 579.591282] ? __lockdep_init_map+0x105/0x590 [ 579.595792] ? lockdep_init_map+0x9/0x10 [ 579.599862] ? __mutex_init+0x1f7/0x290 [ 579.603835] ? rcu_pm_notify+0xc0/0xc0 [ 579.607717] ? __ia32_sys_membarrier+0x150/0x150 [ 579.612487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.618034] ? fsnotify+0xbb4/0x14e0 [ 579.621756] ? init_wait_entry+0x1c0/0x1c0 [ 579.625996] ? fsnotify_first_mark+0x350/0x350 [ 579.630592] ? fsnotify+0x14e0/0x14e0 [ 579.634409] ? security_file_permission+0x1c6/0x240 [ 579.639429] ? rw_verify_area+0x118/0x360 [ 579.643583] ? iter_file_splice_write+0x1010/0x1010 [ 579.648611] do_splice_to+0x12e/0x190 [ 579.652421] splice_direct_to_actor+0x270/0x8f0 [ 579.657090] ? pipe_to_sendpage+0x400/0x400 [ 579.661416] ? do_splice_to+0x190/0x190 [ 579.665399] ? rw_verify_area+0x118/0x360 [ 579.669553] do_splice_direct+0x2d4/0x420 [ 579.673710] ? splice_direct_to_actor+0x8f0/0x8f0 [ 579.678559] ? rw_verify_area+0x118/0x360 [ 579.682730] do_sendfile+0x623/0xe20 [ 579.686450] ? do_compat_pwritev64+0x1c0/0x1c0 [ 579.691057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.696636] ? _copy_from_user+0xdf/0x150 [ 579.700787] __x64_sys_sendfile64+0x15d/0x250 [ 579.705283] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 579.709876] ? ksys_ioctl+0x81/0xd0 [ 579.713510] ? do_syscall_64+0x9a/0x820 [ 579.717494] do_syscall_64+0x1b9/0x820 [ 579.721382] ? finish_task_switch+0x1d3/0x870 [ 579.725882] ? syscall_return_slowpath+0x5e0/0x5e0 [ 579.730815] ? syscall_return_slowpath+0x31d/0x5e0 [ 579.735751] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 579.741116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.745964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.751162] RIP: 0033:0x457089 03:40:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 579.754374] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.773758] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 579.781469] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 579.788748] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 579.796017] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 579.803285] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 579.810554] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000005 03:40:05 executing program 6 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa01000000000000) 03:40:05 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='eth0cpuset)\x00'}, 0x10) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000240)={0x1, 0x6, 0x5, 0x6, 0x401, 0x5}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x401) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x12, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x700}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x28, &(0x7f0000000140)}, 0x10) 03:40:05 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x2], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 579.893578] binder: 10541:10552 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 579.929510] binder: 10541:10556 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="106308540000008535ef05e51b1d58ad880000000000"], 0x0, 0x0, &(0x7f0000000240)}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/75) 03:40:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x7, 0xffffffff00000000, 0x4, 0xc, 0x9, 0x0, 0x2, 0xffffffff, 0x8, 0x18, 0x3, 0x4, 0xe5}, {0x3, 0x200, 0x10001, 0x2, 0x6, 0x3, 0x5, 0x3, 0x36d, 0x8, 0xffffffffffffff98, 0x80000001, 0x9}, {0x5, 0x6, 0x49, 0xc2, 0x8001, 0x434961dc, 0x40, 0x5, 0x0, 0x1ff, 0x7079, 0x10001, 0x74f0eebd}], 0x100000001}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x204080, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="333ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="f4f44c080600004f000100000021"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 580.127633] FAULT_INJECTION: forcing a failure. [ 580.127633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.139599] CPU: 1 PID: 10570 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 580.147012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.156388] Call Trace: [ 580.159060] dump_stack+0x1c9/0x2b4 [ 580.162709] ? dump_stack_print_info.cold.2+0x52/0x52 [ 580.167936] ? find_held_lock+0x36/0x1c0 [ 580.172046] should_fail.cold.4+0xa/0x1a 03:40:05 executing program 7: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r1, &(0x7f00000000c0)="12a3710b708dede913edf04a493c296fff369ec0609fbbdf990b7c2a6e882acea0b1c8e1dc8f54518a20d80fcf9a63f75ba7a1f5d693117b3313d7ecded9c80234ed50d6cd739cad4d90d219ad353e8a192e15a4bd8e3d681e8c30178b138054c4758dfebd8c38e313dc501e862c4dfeaf777f1c56023ed198cf972d0e017b3e7b250616b6a15f1f9eaf06e4411a64e6a2e6c8b894c64d2735841ace8ac60243674fdd9adb998ff79a12ab9189d0dacfde1bed225c8bb591916f43", 0xbb, 0x8000, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r0, &(0x7f0000002e00), 0x40000000000014d, 0x0, 0x0) 03:40:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 580.176164] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.181312] ? kasan_check_read+0x11/0x20 [ 580.185514] ? rcu_is_watching+0x8c/0x150 [ 580.189695] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 580.194277] ? find_held_lock+0x36/0x1c0 [ 580.198391] ? check_same_owner+0x340/0x340 [ 580.202738] ? rcu_note_context_switch+0x730/0x730 [ 580.207712] __alloc_pages_nodemask+0x36e/0xdb0 [ 580.212422] ? default_file_splice_read+0x1da/0xb10 [ 580.217501] ? do_splice_to+0x12e/0x190 [ 580.221513] ? splice_direct_to_actor+0x270/0x8f0 [ 580.226394] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 580.231462] ? rcu_pm_notify+0xc0/0xc0 [ 580.235397] ? __kmalloc_node+0x33/0x70 [ 580.239402] ? __kmalloc_node+0x33/0x70 [ 580.243413] ? rcu_read_lock_sched_held+0x108/0x120 [ 580.248485] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 580.254069] alloc_pages_current+0x10c/0x210 [ 580.258507] push_pipe+0x400/0x7a0 [ 580.262101] ? __kmalloc_node+0x47/0x70 [ 580.266128] iov_iter_get_pages_alloc+0x866/0x1530 [ 580.271132] ? iov_iter_fault_in_readable+0x460/0x460 [ 580.276515] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 580.283388] ? is_bpf_text_address+0xd7/0x170 [ 580.288069] ? kernel_text_address+0x79/0xf0 [ 580.292527] ? __kernel_text_address+0xd/0x40 [ 580.297061] ? unwind_get_return_address+0x61/0xa0 [ 580.302242] ? __save_stack_trace+0x8d/0xf0 [ 580.306604] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 580.311643] ? iov_iter_pipe+0xc2/0x2f0 [ 580.315637] default_file_splice_read+0x1da/0xb10 [ 580.320493] ? do_splice_direct+0x2d4/0x420 [ 580.324821] ? do_sendfile+0x623/0xe20 [ 580.328722] ? __x64_sys_sendfile64+0x15d/0x250 [ 580.333412] ? do_syscall_64+0x1b9/0x820 [ 580.337497] ? iter_file_splice_write+0x1010/0x1010 [ 580.342523] ? kasan_check_read+0x11/0x20 [ 580.346688] ? rcu_is_watching+0x8c/0x150 [ 580.350842] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 580.355258] ? __lockdep_init_map+0x105/0x590 [ 580.359762] ? lockdep_init_map+0x9/0x10 [ 580.363834] ? __mutex_init+0x1f7/0x290 [ 580.367812] ? rcu_pm_notify+0xc0/0xc0 [ 580.371713] ? __ia32_sys_membarrier+0x150/0x150 [ 580.376483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.382220] ? fsnotify+0xbb4/0x14e0 [ 580.385944] ? init_wait_entry+0x1c0/0x1c0 [ 580.390188] ? fsnotify_first_mark+0x350/0x350 [ 580.394773] ? fsnotify+0x14e0/0x14e0 [ 580.398591] ? security_file_permission+0x1c6/0x240 [ 580.403617] ? rw_verify_area+0x118/0x360 [ 580.407799] ? iter_file_splice_write+0x1010/0x1010 [ 580.412821] do_splice_to+0x12e/0x190 [ 580.416639] splice_direct_to_actor+0x270/0x8f0 [ 580.421825] ? pipe_to_sendpage+0x400/0x400 [ 580.426158] ? do_splice_to+0x190/0x190 [ 580.430138] ? rw_verify_area+0x118/0x360 [ 580.434292] do_splice_direct+0x2d4/0x420 [ 580.438460] ? splice_direct_to_actor+0x8f0/0x8f0 [ 580.443329] ? rw_verify_area+0x118/0x360 [ 580.447487] do_sendfile+0x623/0xe20 [ 580.451525] ? do_compat_pwritev64+0x1c0/0x1c0 [ 580.456126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.461674] ? _copy_from_user+0xdf/0x150 [ 580.465834] __x64_sys_sendfile64+0x15d/0x250 [ 580.470348] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 580.474935] ? ksys_ioctl+0x81/0xd0 [ 580.479028] ? do_syscall_64+0x9a/0x820 [ 580.483021] do_syscall_64+0x1b9/0x820 [ 580.486914] ? finish_task_switch+0x1d3/0x870 [ 580.491414] ? syscall_return_slowpath+0x5e0/0x5e0 [ 580.496356] ? syscall_return_slowpath+0x31d/0x5e0 [ 580.501294] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 580.506700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.511557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.516746] RIP: 0033:0x457089 [ 580.519927] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.539330] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.547051] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 580.554844] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 580.562121] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.569398] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 580.576667] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000006 [ 580.596551] binder: 10574:10587 unknown command 1409835792 [ 580.639347] binder: 10574:10587 ioctl c0306201 20000300 returned -22 03:40:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x11, &(0x7f0000000100)=@req3, 0x1c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80302, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) 03:40:06 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x4000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:06 executing program 6 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCSETSW(r0, 0x5437, &(0x7f0000002000)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000100)=0x8) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x4000, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x0, &(0x7f0000000200)=0x100, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r3, 0x4, 0x30, 0x6, 0x5}, &(0x7f0000000180)=0x18) 03:40:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 580.691657] binder: 10574:10582 unknown command 1409835792 [ 580.731183] binder: 10574:10582 ioctl c0306201 20000300 returned -22 03:40:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000001440)={0x0, @in6={{0xa, 0x4e22, 0x8, @empty, 0x3}}, 0x0, 0x20, 0x61, 0xb6af}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001500)=@sack_info={0x0, 0x94, 0x5}, &(0x7f0000001540)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001580)={r3, 0x124000000000000, 0x3, 0x1aa, 0xde, 0x401, 0x2, 0x4, {r4, @in={{0x2, 0x4e20, @loopback}}, 0x100000000, 0x943, 0x4, 0x0, 0x4}}, &(0x7f0000001640)=0xb0) 03:40:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc2) 03:40:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = dup(r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000001) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 580.937710] FAULT_INJECTION: forcing a failure. [ 580.937710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.950145] CPU: 1 PID: 10614 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 580.957857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.967217] Call Trace: [ 580.969830] dump_stack+0x1c9/0x2b4 [ 580.973480] ? dump_stack_print_info.cold.2+0x52/0x52 [ 580.979213] ? find_held_lock+0x36/0x1c0 [ 580.983295] should_fail.cold.4+0xa/0x1a [ 580.987397] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.992530] ? kasan_check_read+0x11/0x20 [ 580.996691] ? rcu_is_watching+0x8c/0x150 [ 581.000861] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.005293] ? find_held_lock+0x36/0x1c0 [ 581.009935] ? check_same_owner+0x340/0x340 [ 581.014274] ? rcu_note_context_switch+0x730/0x730 [ 581.019228] __alloc_pages_nodemask+0x36e/0xdb0 [ 581.023908] ? default_file_splice_read+0x1da/0xb10 [ 581.028933] ? do_splice_to+0x12e/0x190 [ 581.033426] ? splice_direct_to_actor+0x270/0x8f0 [ 581.038277] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 581.043310] ? rcu_pm_notify+0xc0/0xc0 [ 581.047225] ? __kmalloc_node+0x33/0x70 [ 581.051206] ? __kmalloc_node+0x33/0x70 [ 581.055185] ? rcu_read_lock_sched_held+0x108/0x120 [ 581.060215] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 581.065771] alloc_pages_current+0x10c/0x210 [ 581.070691] push_pipe+0x400/0x7a0 [ 581.074236] ? __kmalloc_node+0x47/0x70 [ 581.078224] iov_iter_get_pages_alloc+0x866/0x1530 [ 581.083176] ? iov_iter_fault_in_readable+0x460/0x460 [ 581.088369] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.092787] ? is_bpf_text_address+0xd7/0x170 [ 581.097295] ? kernel_text_address+0x79/0xf0 [ 581.101724] ? __kernel_text_address+0xd/0x40 [ 581.106729] ? unwind_get_return_address+0x61/0xa0 [ 581.111668] ? __save_stack_trace+0x8d/0xf0 [ 581.116007] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 581.121036] ? iov_iter_pipe+0xc2/0x2f0 [ 581.125031] default_file_splice_read+0x1da/0xb10 [ 581.129883] ? do_splice_direct+0x2d4/0x420 [ 581.134203] ? do_sendfile+0x623/0xe20 [ 581.138554] ? __x64_sys_sendfile64+0x15d/0x250 [ 581.143223] ? do_syscall_64+0x1b9/0x820 [ 581.147333] ? iter_file_splice_write+0x1010/0x1010 [ 581.152366] ? kasan_check_read+0x11/0x20 [ 581.156515] ? rcu_is_watching+0x8c/0x150 [ 581.160668] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.165086] ? __lockdep_init_map+0x105/0x590 [ 581.169596] ? lockdep_init_map+0x9/0x10 [ 581.173729] ? __mutex_init+0x1f7/0x290 [ 581.177705] ? rcu_pm_notify+0xc0/0xc0 [ 581.181595] ? __ia32_sys_membarrier+0x150/0x150 [ 581.186364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.191903] ? fsnotify+0xbb4/0x14e0 [ 581.195628] ? init_wait_entry+0x1c0/0x1c0 [ 581.200383] ? fsnotify_first_mark+0x350/0x350 [ 581.204969] ? fsnotify+0x14e0/0x14e0 [ 581.208788] ? security_file_permission+0x1c6/0x240 [ 581.213809] ? rw_verify_area+0x118/0x360 [ 581.217961] ? iter_file_splice_write+0x1010/0x1010 [ 581.222982] do_splice_to+0x12e/0x190 [ 581.226791] splice_direct_to_actor+0x270/0x8f0 [ 581.231463] ? pipe_to_sendpage+0x400/0x400 [ 581.235790] ? do_splice_to+0x190/0x190 [ 581.240290] ? rw_verify_area+0x118/0x360 [ 581.244456] do_splice_direct+0x2d4/0x420 [ 581.248613] ? splice_direct_to_actor+0x8f0/0x8f0 [ 581.253465] ? rw_verify_area+0x118/0x360 [ 581.257617] do_sendfile+0x623/0xe20 [ 581.261350] ? do_compat_pwritev64+0x1c0/0x1c0 [ 581.266466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.272005] ? _copy_from_user+0xdf/0x150 [ 581.276165] __x64_sys_sendfile64+0x15d/0x250 [ 581.281134] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 581.285717] ? ksys_ioctl+0x81/0xd0 [ 581.289352] ? do_syscall_64+0x9a/0x820 [ 581.293348] do_syscall_64+0x1b9/0x820 [ 581.299329] ? finish_task_switch+0x1d3/0x870 [ 581.307497] ? syscall_return_slowpath+0x5e0/0x5e0 [ 581.313067] ? syscall_return_slowpath+0x31d/0x5e0 [ 581.318010] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 581.323386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.328240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.333893] RIP: 0033:0x457089 [ 581.337078] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.356461] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 581.364759] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 581.372027] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 581.379299] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:40:06 executing program 2: r0 = socket(0x1e, 0x1, 0x0) mmap(&(0x7f00004ad000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) getsockopt(r0, 0x8000000006, 0x0, &(0x7f00004ad000), &(0x7f00004ad000)) 03:40:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x300]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:07 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfcffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 581.386577] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 581.393844] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000007 03:40:07 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000280)="b8ae5291d133a36a4474565d270f0c7f798eed4ec7dfa72f1b29464324a86006b02222eef15141e752aceed87e1ff05394dbf54c5be3b3d3a7ae82122a58e5c4944ddff1fcac164d57452879220ef6c2523d0f26c16194e02c33dac5fa8ab3e1f6e6c1c3b4e8ce8a75c289108ef93c9f6af36c142b7a14bde559ac28033bb583723c9dd5ae1544ba55f4df"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0x200, 0x9, 0x2, 0xffff, 0x8000000101, 0x2}) 03:40:07 executing program 6 (fault-call:2 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) [ 581.478076] binder: 10621:10629 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10630840000001000000000000e2bf596ebcd372e7cb653773002d35a3ad77fcc0ab50bc9488491bfb70af4aa4c15169ecd27dcd33371e299df0f8d912b0ce6364a2f98297044623081406eb81d2694968664b9c40e8c5f6ce3cba5f3ff89bb09fcde9eb516dcdc6f4a1e58f220e0f45dd6a0000000000000000000000000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) 03:40:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8e09]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:07 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x4b21a8bd0c], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) r2 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="859634b8bda6e9fb97322d2125d726ae7303b52ffc97c3209a9aafc566789488a03da0928b7cfe1af7be84fea856627ace2acfbe7f987ff7a233c58c513d652e308aeb6a0fced157fa72f7757da60403948bb6bc6b0c2a1e67e38374fce4080e18538e0a9f647e9526914beab2c9acbd0e58ad9f3e04120a0f1ae3fe62d912ea0acba4ac27af1645623cce947007313f71452663447e0f8866c253924d3516b619874b79e528f131f3194d", 0xab, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000003c0)="49f83af595762777d26e9b3f40cafe3d2503d03132a12727cb4f59be3737f1", 0x1f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, r3, r4}, &(0x7f00000005c0)=""/195, 0xc3, &(0x7f0000000540)={&(0x7f0000000500)={'sha512-ssse3\x00'}, &(0x7f00000006c0)="5cedf0e6c3cef4f621cad5ed8e8ea81b7846d48e28029594bec0848c2694d773446cac56af95531843b28567455cc20a7130ed92a256a3c9aae16089f01043faeaf2", 0x42}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) [ 581.747595] FAULT_INJECTION: forcing a failure. [ 581.747595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.759638] CPU: 1 PID: 10653 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 581.767011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.776895] Call Trace: [ 581.779505] dump_stack+0x1c9/0x2b4 [ 581.783161] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.788397] ? zap_class+0x740/0x740 [ 581.792688] should_fail.cold.4+0xa/0x1a [ 581.796764] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.801876] ? rcu_is_watching+0x8c/0x150 [ 581.806045] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.810489] ? find_held_lock+0x36/0x1c0 [ 581.814595] ? check_same_owner+0x340/0x340 [ 581.818943] ? rcu_note_context_switch+0x730/0x730 [ 581.824417] __alloc_pages_nodemask+0x36e/0xdb0 [ 581.829120] ? default_file_splice_read+0x1da/0xb10 [ 581.834149] ? do_splice_to+0x12e/0x190 [ 581.838142] ? splice_direct_to_actor+0x270/0x8f0 [ 581.843006] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 581.848058] ? rcu_pm_notify+0xc0/0xc0 [ 581.851974] ? __kmalloc_node+0x33/0x70 [ 581.856489] ? __kmalloc_node+0x33/0x70 [ 581.860489] ? rcu_read_lock_sched_held+0x108/0x120 [ 581.865525] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 581.871081] alloc_pages_current+0x10c/0x210 [ 581.875513] push_pipe+0x400/0x7a0 [ 581.879061] ? __kmalloc_node+0x47/0x70 [ 581.883065] iov_iter_get_pages_alloc+0x866/0x1530 [ 581.888031] ? iov_iter_fault_in_readable+0x460/0x460 [ 581.893689] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.898127] ? is_bpf_text_address+0xd7/0x170 [ 581.902639] ? kernel_text_address+0x79/0xf0 [ 581.907058] ? __kernel_text_address+0xd/0x40 [ 581.911570] ? unwind_get_return_address+0x61/0xa0 [ 581.916512] ? __save_stack_trace+0x8d/0xf0 [ 581.921370] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 581.926398] ? iov_iter_pipe+0xc2/0x2f0 [ 581.930394] default_file_splice_read+0x1da/0xb10 [ 581.935253] ? do_splice_direct+0x2d4/0x420 [ 581.939582] ? do_sendfile+0x623/0xe20 [ 581.943478] ? __x64_sys_sendfile64+0x15d/0x250 [ 581.948151] ? do_syscall_64+0x1b9/0x820 [ 581.953135] ? iter_file_splice_write+0x1010/0x1010 [ 581.958652] ? rcu_is_watching+0x8c/0x150 [ 581.962807] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.967229] ? __lockdep_init_map+0x105/0x590 [ 581.971738] ? lockdep_init_map+0x9/0x10 [ 581.975810] ? __mutex_init+0x1f7/0x290 [ 581.979785] ? rcu_pm_notify+0xc0/0xc0 [ 581.983680] ? __ia32_sys_membarrier+0x150/0x150 [ 581.988665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.994229] ? fsnotify+0xbb4/0x14e0 [ 581.997953] ? init_wait_entry+0x1c0/0x1c0 [ 582.002196] ? fsnotify_first_mark+0x350/0x350 [ 582.006786] ? fsnotify+0x14e0/0x14e0 [ 582.010607] ? security_file_permission+0x1c6/0x240 [ 582.015635] ? rw_verify_area+0x118/0x360 [ 582.019792] ? iter_file_splice_write+0x1010/0x1010 [ 582.025346] do_splice_to+0x12e/0x190 [ 582.029164] splice_direct_to_actor+0x270/0x8f0 [ 582.033844] ? pipe_to_sendpage+0x400/0x400 [ 582.038179] ? do_splice_to+0x190/0x190 [ 582.042167] ? rw_verify_area+0x118/0x360 [ 582.046339] do_splice_direct+0x2d4/0x420 [ 582.050501] ? splice_direct_to_actor+0x8f0/0x8f0 [ 582.055872] ? rw_verify_area+0x118/0x360 [ 582.060031] do_sendfile+0x623/0xe20 [ 582.063769] ? do_compat_pwritev64+0x1c0/0x1c0 [ 582.068381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.073925] ? _copy_from_user+0xdf/0x150 [ 582.078086] __x64_sys_sendfile64+0x15d/0x250 [ 582.083120] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 582.087710] ? ksys_ioctl+0x81/0xd0 [ 582.091349] ? do_syscall_64+0x9a/0x820 [ 582.095345] do_syscall_64+0x1b9/0x820 [ 582.099237] ? finish_task_switch+0x1d3/0x870 [ 582.103744] ? syscall_return_slowpath+0x5e0/0x5e0 [ 582.108680] ? syscall_return_slowpath+0x31d/0x5e0 [ 582.113625] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 582.119508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.124372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.129566] RIP: 0033:0x457089 [ 582.132753] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.152767] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 582.160490] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 582.167765] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 582.175034] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 582.182308] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 582.189799] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000008 03:40:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:07 executing program 6 (fault-call:2 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:07 executing program 7: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5c5242e283536f05dfcf3c925d43c6cf1eb17fde04dfbf2b3", 0x19}], 0x1) write(r0, &(0x7f0000805000)="346bd71b3c015b53c0833e97df6312f9b0659db5b29837caa9", 0x19) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0x0, &(0x7f00001e1e78)}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x5, @remote, 0x2d7}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) [ 582.209675] binder: 10658:10668 BC_DEAD_BINDER_DONE 0000000000010000 not found 03:40:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xf800000000000000, 0x0, 0xfff, 0x80, 0x0, 0x6, 0x6, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, 0x2, 0x1]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:40:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070008400000000000000000240272a5232122fc8d66dc7b4ea02e"], 0x0, 0x0, &(0x7f0000000240)}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0) [ 582.279678] binder: 10658:10668 BC_DEAD_BINDER_DONE 0000000000010000 not found 03:40:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x77020000) 03:40:07 executing program 2: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0xea, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xea, 0xfff, 0x8000, 0x4, 0xc0dd, 0x36, 0x3f, 0x100, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x10000}, 0x8) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000100)}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)={@remote, @dev}, &(0x7f0000000040)) 03:40:08 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x9], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 582.577645] FAULT_INJECTION: forcing a failure. [ 582.577645] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.589654] CPU: 1 PID: 10704 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 582.597034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.606954] Call Trace: [ 582.609593] dump_stack+0x1c9/0x2b4 [ 582.613245] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.618455] ? zap_class+0x740/0x740 [ 582.622193] should_fail.cold.4+0xa/0x1a [ 582.626284] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.631418] ? rcu_is_watching+0x8c/0x150 [ 582.635575] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 582.639994] ? find_held_lock+0x36/0x1c0 [ 582.644539] ? check_same_owner+0x340/0x340 [ 582.648876] ? rcu_note_context_switch+0x730/0x730 [ 582.653825] __alloc_pages_nodemask+0x36e/0xdb0 [ 582.658502] ? default_file_splice_read+0x1da/0xb10 [ 582.663522] ? do_splice_to+0x12e/0x190 [ 582.667506] ? splice_direct_to_actor+0x270/0x8f0 [ 582.672369] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 582.677949] ? rcu_pm_notify+0xc0/0xc0 [ 582.681851] ? __kmalloc_node+0x33/0x70 [ 582.685830] ? __kmalloc_node+0x33/0x70 [ 582.689811] ? rcu_read_lock_sched_held+0x108/0x120 [ 582.694836] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 582.700386] alloc_pages_current+0x10c/0x210 [ 582.705155] push_pipe+0x400/0x7a0 [ 582.708703] ? __kmalloc_node+0x47/0x70 [ 582.712692] iov_iter_get_pages_alloc+0x866/0x1530 [ 582.717638] ? iov_iter_fault_in_readable+0x460/0x460 [ 582.722836] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 582.727261] ? is_bpf_text_address+0xd7/0x170 [ 582.731767] ? kernel_text_address+0x79/0xf0 [ 582.736688] ? __kernel_text_address+0xd/0x40 [ 582.741192] ? unwind_get_return_address+0x61/0xa0 [ 582.746133] ? __save_stack_trace+0x8d/0xf0 [ 582.750475] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 582.755499] ? iov_iter_pipe+0xc2/0x2f0 [ 582.759487] default_file_splice_read+0x1da/0xb10 [ 582.764363] ? do_splice_direct+0x2d4/0x420 [ 582.768691] ? do_sendfile+0x623/0xe20 [ 582.772582] ? __x64_sys_sendfile64+0x15d/0x250 [ 582.777728] ? do_syscall_64+0x1b9/0x820 [ 582.781805] ? iter_file_splice_write+0x1010/0x1010 [ 582.786827] ? rcu_is_watching+0x8c/0x150 [ 582.790975] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 582.795392] ? __lockdep_init_map+0x105/0x590 [ 582.799893] ? lockdep_init_map+0x9/0x10 [ 582.803959] ? __mutex_init+0x1f7/0x290 [ 582.807933] ? rcu_pm_notify+0xc0/0xc0 [ 582.811826] ? __ia32_sys_membarrier+0x150/0x150 [ 582.816589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.822593] ? fsnotify+0xbb4/0x14e0 [ 582.826327] ? init_wait_entry+0x1c0/0x1c0 [ 582.830565] ? fsnotify_first_mark+0x350/0x350 [ 582.835153] ? fsnotify+0x14e0/0x14e0 [ 582.839498] ? security_file_permission+0x1c6/0x240 [ 582.844733] ? rw_verify_area+0x118/0x360 [ 582.848897] ? iter_file_splice_write+0x1010/0x1010 [ 582.853920] do_splice_to+0x12e/0x190 [ 582.857733] splice_direct_to_actor+0x270/0x8f0 [ 582.862413] ? pipe_to_sendpage+0x400/0x400 [ 582.866746] ? do_splice_to+0x190/0x190 [ 582.870732] ? rw_verify_area+0x118/0x360 [ 582.874888] do_splice_direct+0x2d4/0x420 [ 582.879047] ? splice_direct_to_actor+0x8f0/0x8f0 [ 582.883904] ? rw_verify_area+0x118/0x360 [ 582.888061] do_sendfile+0x623/0xe20 [ 582.891791] ? do_compat_pwritev64+0x1c0/0x1c0 [ 582.896390] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.901935] ? _copy_from_user+0xdf/0x150 [ 582.906109] __x64_sys_sendfile64+0x15d/0x250 [ 582.910608] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 582.915191] ? ksys_ioctl+0x81/0xd0 [ 582.918820] ? do_syscall_64+0x9a/0x820 [ 582.922802] do_syscall_64+0x1b9/0x820 [ 582.926692] ? finish_task_switch+0x1d3/0x870 [ 582.931193] ? syscall_return_slowpath+0x5e0/0x5e0 [ 582.936133] ? syscall_return_slowpath+0x31d/0x5e0 [ 582.941073] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 582.946449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.951339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.956684] RIP: 0033:0x457089 03:40:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa0f, &(0x7f0000000140)="4888ec36228da763477c99e5714040f7e5282e9b4379beaf7c747a06d8fe87380a9425883aa9f694aa7f3f84e6700a7c86832c9ee9ea5f4dc0734e5708344f5339ad5b3119be97", &(0x7f00000001c0)="1852e401cf6454ad3cf2a077396b543dd462c70060bfab4893bf1ccc97f3fb8458a448c0ecb5fb26111bb73d37dc34dea56603ee7d17bce2565b387725882e41ffbec268b830dc349a4b1f52863d3f8df59d43baab792465f0c80f958941cce46ebd7ace351ab3e47e72c5", 0x47, 0x6b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 582.962675] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.982651] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 582.990362] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 582.997629] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 583.005367] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 583.013345] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 583.020617] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000009 03:40:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x80080) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000200)={0x5, 0x3f, 0x1, 'queue0\x00', 0x4}) 03:40:08 executing program 2: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000008b40)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/216, 0xd8}], 0x3, &(0x7f0000000380)=""/231, 0xe7, 0x3f}, 0x300000000000000}, {{&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/135, 0x87}], 0x2, &(0x7f00000006c0)=""/237, 0xed, 0x3}, 0x20000000000}, {{&(0x7f00000007c0)=@rc, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)=""/66, 0x42}, {&(0x7f00000008c0)=""/7, 0x7}], 0x2, &(0x7f0000000940)=""/66, 0x42, 0xffffffff}}, {{&(0x7f00000009c0)=@rc, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a40)=""/132, 0x84}, {&(0x7f0000000b00)=""/96, 0x60}, {&(0x7f0000000b80)=""/26, 0x1a}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/234, 0xea}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/75, 0x4b}, {&(0x7f0000001d80)=""/132, 0x84}], 0x8, &(0x7f0000001ec0)=""/178, 0xb2, 0x8000}}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002000)=""/30, 0x1e}, {&(0x7f0000002040)=""/162, 0xa2}, {&(0x7f0000002100)=""/142, 0x8e}, {&(0x7f00000021c0)=""/247, 0xf7}, {&(0x7f00000022c0)=""/187, 0xbb}, {&(0x7f0000002380)=""/163, 0xa3}, {&(0x7f0000002440)=""/20, 0x14}, {&(0x7f0000002480)=""/63, 0x3f}, {&(0x7f00000024c0)=""/187, 0xbb}], 0x9, 0x0, 0x0, 0x6}, 0x4}, {{&(0x7f0000002640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004a80)=[{&(0x7f00000026c0)=""/50, 0x32}, {&(0x7f0000002700)=""/208, 0xd0}, {&(0x7f0000002800)=""/171, 0xab}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/60, 0x3c}, {&(0x7f0000004900)=""/69, 0x45}, {&(0x7f0000004980)=""/253, 0xfd}], 0x8, &(0x7f0000004b00)=""/151, 0x97, 0x3}, 0x6}, {{&(0x7f0000004bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004c40)=""/247, 0xf7}, {&(0x7f0000004d40)=""/8, 0x8}], 0x2, &(0x7f0000004dc0)=""/235, 0xeb, 0x45}, 0x5}, {{&(0x7f0000004ec0)=@rc, 0x80, &(0x7f0000006140)=[{&(0x7f0000004f40)=""/199, 0xc7}, {&(0x7f0000005040)=""/83, 0x53}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/90, 0x5a}], 0x4, &(0x7f0000006180)=""/143, 0x8f, 0x800000000}, 0x5}, {{&(0x7f0000006240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000007540)=[{&(0x7f00000062c0)=""/177, 0xb1}, {&(0x7f0000006380)=""/193, 0xc1}, {&(0x7f0000006480)=""/56, 0x38}, {&(0x7f00000064c0)=""/104, 0x68}, {&(0x7f0000006540)=""/4096, 0x1000}], 0x5, &(0x7f00000075c0)=""/4096, 0x1000, 0x1000}, 0x1}, {{&(0x7f00000085c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008640)=""/166, 0xa6}, {&(0x7f0000008700)=""/102, 0x66}, {&(0x7f0000008780)=""/129, 0x81}, {&(0x7f0000008840)=""/36, 0x24}, {&(0x7f0000008880)=""/123, 0x7b}, {&(0x7f0000008900)=""/151, 0x97}, {&(0x7f00000089c0)=""/52, 0x34}, {&(0x7f0000008a00)=""/51, 0x33}], 0x8, &(0x7f0000008ac0)=""/114, 0x72, 0x6}, 0x8}], 0xa, 0x40000000, &(0x7f0000008dc0)={0x77359400}) r1 = accept$unix(r0, &(0x7f0000008e40)=@abs, &(0x7f0000008e00)=0x6e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'ipddp0\x00', {0x2, 0x4e23, @remote}}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) 03:40:08 executing program 6 (fault-call:2 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:08 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffe61, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0xb602}, 0xc) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001180), 0x30a, &(0x7f0000000140)}}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x9c8c, 0x204002) 03:40:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:08 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x4000000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 583.262494] binder: 10727:10730 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500) [ 583.321610] binder: 10727:10735 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 583.347816] FAULT_INJECTION: forcing a failure. [ 583.347816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.359793] CPU: 1 PID: 10743 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 583.367178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.376547] Call Trace: [ 583.379173] dump_stack+0x1c9/0x2b4 [ 583.382828] ? dump_stack_print_info.cold.2+0x52/0x52 [ 583.388045] ? find_held_lock+0x36/0x1c0 [ 583.392675] should_fail.cold.4+0xa/0x1a [ 583.396769] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 583.401893] ? kasan_check_read+0x11/0x20 [ 583.406062] ? rcu_is_watching+0x8c/0x150 [ 583.410245] ? find_held_lock+0x36/0x1c0 [ 583.414360] ? check_same_owner+0x340/0x340 03:40:08 executing program 2: mlockall(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'osx.', '*self\x00'}, &(0x7f00000000c0)='/dev/kvm\x00', 0x9, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x400}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:08 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x500], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0xfffffc6e) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="f10f804e87b8ae8445f04dd5471d2b2a7ed9645a117827687622c0f88263bb8fe36f19837df62fd19beb99d38c8b398fbc434518ef6c4938d1bc5e84616693a82885f891dc8b60602eb96fa8d1c7fa4b3c95ed"], 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800, 0x0) [ 583.418707] ? rcu_note_context_switch+0x730/0x730 [ 583.423681] __alloc_pages_nodemask+0x36e/0xdb0 [ 583.428878] ? default_file_splice_read+0x1da/0xb10 [ 583.433905] ? do_splice_to+0x12e/0x190 [ 583.437875] ? splice_direct_to_actor+0x270/0x8f0 [ 583.442732] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 583.447794] ? rcu_pm_notify+0xc0/0xc0 [ 583.451722] ? __kmalloc_node+0x33/0x70 [ 583.455723] ? __kmalloc_node+0x33/0x70 [ 583.460173] ? rcu_read_lock_sched_held+0x108/0x120 [ 583.465224] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 583.470802] alloc_pages_current+0x10c/0x210 [ 583.475239] push_pipe+0x400/0x7a0 [ 583.478797] ? __kmalloc_node+0x47/0x70 [ 583.482802] iov_iter_get_pages_alloc+0x866/0x1530 [ 583.487757] ? iov_iter_fault_in_readable+0x460/0x460 [ 583.492953] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 583.497405] ? is_bpf_text_address+0xd7/0x170 [ 583.501917] ? kernel_text_address+0x79/0xf0 [ 583.506346] ? __kernel_text_address+0xd/0x40 [ 583.510847] ? unwind_get_return_address+0x61/0xa0 [ 583.515789] ? __save_stack_trace+0x8d/0xf0 [ 583.520142] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 583.525680] ? iov_iter_pipe+0xc2/0x2f0 [ 583.529671] default_file_splice_read+0x1da/0xb10 [ 583.534526] ? do_splice_direct+0x2d4/0x420 [ 583.538850] ? do_sendfile+0x623/0xe20 [ 583.542742] ? __x64_sys_sendfile64+0x15d/0x250 [ 583.547415] ? do_syscall_64+0x1b9/0x820 [ 583.551494] ? iter_file_splice_write+0x1010/0x1010 [ 583.556606] ? kasan_check_read+0x11/0x20 [ 583.561255] ? rcu_is_watching+0x8c/0x150 [ 583.565424] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 583.569856] ? __lockdep_init_map+0x105/0x590 [ 583.574361] ? lockdep_init_map+0x9/0x10 [ 583.578430] ? __mutex_init+0x1f7/0x290 [ 583.582401] ? rcu_pm_notify+0xc0/0xc0 [ 583.586305] ? __ia32_sys_membarrier+0x150/0x150 [ 583.591549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 583.597091] ? fsnotify+0xbb4/0x14e0 [ 583.600824] ? init_wait_entry+0x1c0/0x1c0 [ 583.605061] ? fsnotify_first_mark+0x350/0x350 [ 583.609660] ? fsnotify+0x14e0/0x14e0 [ 583.613475] ? security_file_permission+0x1c6/0x240 [ 583.618523] ? rw_verify_area+0x118/0x360 [ 583.622679] ? iter_file_splice_write+0x1010/0x1010 [ 583.627707] do_splice_to+0x12e/0x190 [ 583.631518] splice_direct_to_actor+0x270/0x8f0 [ 583.636193] ? pipe_to_sendpage+0x400/0x400 [ 583.640526] ? do_splice_to+0x190/0x190 [ 583.644508] ? rw_verify_area+0x118/0x360 [ 583.648664] do_splice_direct+0x2d4/0x420 [ 583.653364] ? splice_direct_to_actor+0x8f0/0x8f0 [ 583.658223] ? rw_verify_area+0x118/0x360 [ 583.662375] do_sendfile+0x623/0xe20 [ 583.666113] ? do_compat_pwritev64+0x1c0/0x1c0 [ 583.670713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.676256] ? _copy_from_user+0xdf/0x150 [ 583.680412] __x64_sys_sendfile64+0x15d/0x250 [ 583.684911] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 583.690028] ? ksys_ioctl+0x81/0xd0 [ 583.693661] ? do_syscall_64+0x9a/0x820 [ 583.697645] do_syscall_64+0x1b9/0x820 [ 583.701535] ? finish_task_switch+0x1d3/0x870 [ 583.706049] ? syscall_return_slowpath+0x5e0/0x5e0 [ 583.711004] ? syscall_return_slowpath+0x31d/0x5e0 [ 583.715949] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 583.721824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.726676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 583.731865] RIP: 0033:0x457089 [ 583.735050] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.755044] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 583.762781] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 03:40:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000e000000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:40:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x6c9, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000540)={0x11, 0x10, 0xfa00, {&(0x7f0000000400), r1}}, 0x18) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) socketpair(0x8, 0x80800, 0x7, &(0x7f0000000280)={0xffffffffffffffff}) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r2, r4, 0x3, 0x1}, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) 03:40:09 executing program 6 (fault-call:2 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) [ 583.770054] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 583.777334] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 583.785081] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 583.792383] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000a 03:40:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:09 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 584.109527] FAULT_INJECTION: forcing a failure. [ 584.109527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.121614] CPU: 0 PID: 10773 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #182 [ 584.129000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.138366] Call Trace: [ 584.140968] dump_stack+0x1c9/0x2b4 [ 584.144618] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.149826] ? zap_class+0x740/0x740 [ 584.153562] should_fail.cold.4+0xa/0x1a [ 584.157649] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.162767] ? rcu_is_watching+0x8c/0x150 [ 584.166928] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 584.171371] ? find_held_lock+0x36/0x1c0 [ 584.175460] ? check_same_owner+0x340/0x340 [ 584.179803] ? rcu_note_context_switch+0x730/0x730 [ 584.184754] __alloc_pages_nodemask+0x36e/0xdb0 [ 584.189434] ? default_file_splice_read+0x1da/0xb10 [ 584.194463] ? do_splice_to+0x12e/0x190 [ 584.198445] ? splice_direct_to_actor+0x270/0x8f0 [ 584.203301] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 584.208364] ? rcu_pm_notify+0xc0/0xc0 [ 584.212268] ? __kmalloc_node+0x33/0x70 [ 584.216252] ? __kmalloc_node+0x33/0x70 [ 584.220241] ? rcu_read_lock_sched_held+0x108/0x120 [ 584.225280] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 584.230831] alloc_pages_current+0x10c/0x210 [ 584.235256] push_pipe+0x400/0x7a0 [ 584.238804] ? __kmalloc_node+0x47/0x70 [ 584.242794] iov_iter_get_pages_alloc+0x866/0x1530 [ 584.247752] ? iov_iter_fault_in_readable+0x460/0x460 [ 584.252948] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 584.257375] ? is_bpf_text_address+0xd7/0x170 [ 584.261881] ? kernel_text_address+0x79/0xf0 [ 584.266301] ? __kernel_text_address+0xd/0x40 [ 584.270819] ? unwind_get_return_address+0x61/0xa0 [ 584.275773] ? __save_stack_trace+0x8d/0xf0 [ 584.280119] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 584.285145] ? iov_iter_pipe+0xc2/0x2f0 [ 584.289144] default_file_splice_read+0x1da/0xb10 [ 584.293998] ? do_splice_direct+0x2d4/0x420 [ 584.298341] ? do_sendfile+0x623/0xe20 [ 584.302239] ? __x64_sys_sendfile64+0x15d/0x250 [ 584.306913] ? do_syscall_64+0x1b9/0x820 [ 584.310992] ? iter_file_splice_write+0x1010/0x1010 [ 584.316028] ? rcu_is_watching+0x8c/0x150 [ 584.320186] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 584.324620] ? __lockdep_init_map+0x105/0x590 [ 584.329126] ? lockdep_init_map+0x9/0x10 [ 584.333195] ? __mutex_init+0x1f7/0x290 [ 584.337170] ? rcu_pm_notify+0xc0/0xc0 [ 584.341067] ? __ia32_sys_membarrier+0x150/0x150 [ 584.345833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.351375] ? fsnotify+0xbb4/0x14e0 [ 584.355097] ? init_wait_entry+0x1c0/0x1c0 [ 584.359348] ? fsnotify_first_mark+0x350/0x350 [ 584.363936] ? fsnotify+0x14e0/0x14e0 [ 584.367756] ? security_file_permission+0x1c6/0x240 [ 584.372783] ? rw_verify_area+0x118/0x360 [ 584.376938] ? iter_file_splice_write+0x1010/0x1010 [ 584.381962] do_splice_to+0x12e/0x190 [ 584.385781] splice_direct_to_actor+0x270/0x8f0 [ 584.390457] ? pipe_to_sendpage+0x400/0x400 [ 584.394789] ? do_splice_to+0x190/0x190 [ 584.398779] ? rw_verify_area+0x118/0x360 [ 584.402939] do_splice_direct+0x2d4/0x420 [ 584.407098] ? splice_direct_to_actor+0x8f0/0x8f0 [ 584.411952] ? rw_verify_area+0x118/0x360 [ 584.416111] do_sendfile+0x623/0xe20 [ 584.419839] ? do_compat_pwritev64+0x1c0/0x1c0 [ 584.424436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.429978] ? _copy_from_user+0xdf/0x150 [ 584.434138] __x64_sys_sendfile64+0x15d/0x250 [ 584.438646] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 584.443231] ? ksys_ioctl+0x81/0xd0 [ 584.446864] ? do_syscall_64+0x9a/0x820 [ 584.450852] do_syscall_64+0x1b9/0x820 [ 584.454753] ? finish_task_switch+0x1d3/0x870 [ 584.459254] ? syscall_return_slowpath+0x5e0/0x5e0 [ 584.464192] ? syscall_return_slowpath+0x31d/0x5e0 [ 584.469222] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 584.474606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 584.479461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.484652] RIP: 0033:0x457089 [ 584.487839] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.507264] RSP: 002b:00007f422f49bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 584.514983] RAX: ffffffffffffffda RBX: 00007f422f49c6d4 RCX: 0000000000457089 [ 584.522254] RDX: 0000000020301ff8 RSI: 0000000000000003 RDI: 0000000000000004 [ 584.529523] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 584.536793] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000005 [ 584.544075] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000b 03:40:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 584.575386] binder: 10771:10776 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb3e6ca8d1ee7c22be56aa42d784ad85262ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1810118e70a11af004010f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:10 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xb], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 584.714496] binder: 10771:10784 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa010000) 03:40:10 executing program 6 (fault-call:2 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 03:40:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r1, 0x0, 0x22ea, 0x8, 0x5}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ffd, 0x900) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="f2711b4578b2cdc547edfaf86e4239f073934c4eb3142383b9f8dd6015bf192d72395bfcd67dbd9d823fcff58b6d268abba597275f77d966c40f57eba116e9be445a5fb700e930b9aa6c3b009da7fc9862a7e2346e9f6c51025c7598ee9fd1878a517a085e4b559e4744271662c88265a90e08befeea1f0b5492617ed0360c5ebf53d87bd5b743d74a7e260586ead572253332d3", 0x94, 0x7}, {&(0x7f0000000340)="9859837c245e943cb75bcb340ffd3b61019f316c4227535377a86afbe549812ec12096cb289eb22536c5699a4b7adfb03dfe6a11ba0d2d443f3f00fcbb414065ddd21f3feee03c3d4525872afe632a4b47ab454d6f680af71d474a9e042db7cd39cd419725835c7b6898b38936d1077ae68fd4fc653d94d6b34bd442426ece9ff59fd50da764e718ced7299528dd19ff6375570abdc3f5b063a9af9dcc66c7004c26e68e325139c21adaf160411c7a64badf8b4438de6950eda333f3b8ea69c9677a226b389045da6fd3d57bf09ec517236c1615da77462291c9d6236641da299f9d49a6dca0683203a879f9a0f3f5", 0xef, 0x1c8}], 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:10 executing program 7: r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = dup(r0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000140)=0x33) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000500)={{0xa, 0x6, 0x4, 0x4, '\x00', 0x9}, 0x1, [0x895e, 0x2efd, 0x5, 0x9, 0x9, 0x1, 0x40004000, 0x97ea, 0xffff, 0x8, 0x1ff, 0x7, 0x20, 0x1, 0x3, 0x3, 0x1, 0x101, 0xc3c, 0x2, 0x0, 0x1cf, 0x4, 0x8, 0x6000000000, 0x6, 0x100000000, 0x3, 0x2, 0x2000000000, 0xfff, 0x9, 0x800, 0x10000, 0xffffffffffffffc8, 0x5, 0x1f, 0x7fff, 0x0, 0x20, 0xfff, 0x80000000, 0x4, 0x7, 0x6, 0x6, 0x9, 0x44c8, 0xd7e9, 0x81, 0x200, 0x8001, 0xffff, 0xfffffffffffffffb, 0x9, 0x7, 0x3, 0x0, 0x3, 0x9d, 0xfff, 0x4, 0x40, 0x7fffffff, 0x0, 0x1, 0x5, 0x9, 0x2, 0x8, 0xf66a, 0x3, 0x4, 0x0, 0x1f, 0xf0, 0x2, 0xd02, 0x7fffffff, 0x1f, 0xa7d, 0x80000000, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x2f3, 0x3, 0x4, 0xf4a, 0x7fffffff, 0x1000, 0x1, 0x0, 0x3f, 0x4, 0x2, 0x9, 0x0, 0x1f, 0xffffffffffff9de0, 0x8, 0x9, 0x0, 0x1, 0x2, 0x200, 0xff, 0xae7c, 0x7, 0x3b3, 0x10001, 0x3, 0x10001, 0x4, 0x100000001, 0x5, 0x5, 0x10001, 0x9b, 0x7, 0xfffffffffffffffa, 0x400, 0x5, 0x0, 0x100000001, 0xffffffff80000001, 0x2], {0x0, 0x989680}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x4100) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000080)=""/126) tkill(r1, 0x1000000000016) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) 03:40:10 executing program 2: rt_sigsuspend(&(0x7f0000000000)={0x8001}, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e22, 0x4, @remote, 0x7}, r1}}, 0x38) pread64(r0, &(0x7f0000000180)=""/193, 0xc1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x80000001, 0x2, [0x6, 0x9]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast1}, 0xfff}}, 0x7ff, 0x7fff}, &(0x7f00000003c0)=0x90) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000400)={0x8, 0x6, 0x80000000}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000440)={0x2f3, 0x61, "b06619449d99011fd4e9ebd8fce0b0620ac91930a89d3a0303e93a2868326a8913d2fdfe22552742ba611d6c58fb5b837c1a3cfd578faaafa0d87d1f941263c77a3cb586e759d4f67ee1980ba7c61f2e31960c7d618a0bb1fa61d5b41f92ea462d"}) fstatfs(r0, &(0x7f00000004c0)=""/84) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000580)={0x34, 0x0, &(0x7f0000000540)}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000005c0)={0x36, 0x6, 0x0, {0x0, 0x3, 0xd, 0x0, 'pids.current\x00'}}, 0x36) syslog(0x3, &(0x7f0000000600)=""/209, 0xd1) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) r4 = socket$netlink(0x10, 0x3, 0x17) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000900)=""/168, &(0x7f00000009c0)=0xa8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000a00), 0x2}}, 0x20) r6 = open(&(0x7f0000000a80)='./file0\x00', 0x0, 0x80) write$binfmt_misc(r0, &(0x7f0000000ac0)={'syz1', "170b"}, 0x6) r7 = gettid() ptrace$getregs(0xe, r7, 0x6, &(0x7f0000000b00)=""/42) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b40)={0xaa, 0x1}) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000b80)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x1b, 0x5, 0x598, 0x318, 0x0, 0x0, 0x420, 0xc0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x5, &(0x7f0000000bc0), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xdaf97e1}}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4}}, @common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0x4e21, 0x4e20, 0x4e22, 0x4e20, [0xfffffffffffffc00, 0x24a00000000, 0x7, 0x1, 0x3, 0xffff, 0x2, 0x5d, 0x7fffffff, 0x2, 0x9, 0x9, 0x2, 0x10001, 0x3, 0xfff, 0x3, 0x9, 0xffff, 0x1, 0x200, 0x1, 0x2, 0x2, 0xc89, 0xbee, 0x6, 0x6, 0x1, 0x1, 0x200, 0x4, 0x0, 0x800, 0xfffffffffffffffa, 0x7, 0x82, 0x401, 0x1, 0x3, 0x1000, 0x2, 0x546, 0xa0c2, 0x9, 0xfffffffff49b4493, 0x7, 0x1, 0x1, 0x5, 0x7f, 0x4a000000000, 0x1000, 0xfffffffffffffffa, 0x10001, 0x2, 0x4, 0x8a, 0x3, 0x5d6cf5b7, 0x3, 0x40, 0xc15, 0xbc5], 0x4, [{0x3ff, 0x8000, 0x2}, {0x1, 0x7, 0xfffffffffffffffb}, {0x7, 0x7}, {0xf0, 0x1f, 0x100}], 0x1, 0x5, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv6=@loopback, @ipv6=@mcast1, @port=0x4e24, @gre_key=0x7ff}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xb, 0x8, 0xfff, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xc, @ipv6=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, @port=0x4e20, @port=0x4e24}}}, {{@uncond, 0x0, 0x98, 0xe0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@remote, @ipv6=@remote, @gre_key, @icmp_id=0x68}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001240)=r2, 0x4) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000001280)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000012c0)={0xaa, 0x10}) 03:40:10 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xcbda8214b000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffffff9e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) [ 585.091311] MINIX-fs: unable to read superblock 03:40:10 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)={0x0, 0x8, 0x9, 0x0, 0xbca, 0xb22, 0x6, 0x6, 0x100000000, 0x7fffffff, 0x6, 0x9, 0x0, 0x10000, 0x4, 0x6, 0x800, 0x7fff, 0x2b32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$KVM_NMI(r4, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0001"], 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 585.130614] binder: 10814:10825 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:10 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000c00)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000240)="2d3ea8edcfeab835d88d39e591c67c8824", 0x11}, {&(0x7f00000002c0)="addbca35007f100fc3dba0d5a4561b1a5013286abe2c6b1d033f2e6126a345c315d8282dd1fd360e0dada9c4294daac3cc5768240f31516f2f385807cad5dfa2027108d9f92d10e572d30e03ade216bff5ce7c8e727caefd12df3979b6880e0cc775f61a91dfebff1aa0df170bcbe5d45f183cc37a85708b7208c17f12ac75cf224a8d06e420830fd6bcfdefe96bd37ba5cb91a6fcd5db330fc5", 0x9a}, {&(0x7f0000000500)="0ba33692b10904570d26e832c3432eddfbf844dd667fc8b2049ccd9205dbec5e8b838d4eed69ab2190d4801541a2ed4052dfa453dd0c9301abaee9fb1c6e2ab8c7094bffca86c5b7b2cd1f00b763b600142196b5e9831cb8f0f4cd6c2a0a8f95d3f0415d1d24e166fdbc959ac0219212d20f72ace8417bffb7c747cdaaeaf860f85dbd17a7a3be0a722da04e8377934361bab58260cc070b993b859b94cef12fb62ddd52ecd6f055", 0xa8}, {&(0x7f0000000700)="9a4c8eb2b45dd79d54fd7b94066af199679db1a59702d30db4d1010129d6d7348eb51f5f33f4008cf424be023e12200eaffd50b6e65c821ba18a0aec056002ac69ca4e78af6b45588214b0fac6fe623a0cba60b1c153b54865486f41a0fe7f5af589472ec498c070de74f7988942c195559878602b392a9c4769bcbae20c465b5930b2ea129fc5b87b2c", 0x8a}, {&(0x7f00000007c0)="094818b86303536e3377438f338a066f20e27a2c661b80b1c174d137afa23fc06099ea761a60d3ba2f0e7e8e76969f1d6a251322ba68df6e565e614e5f8d66c3e57560f52a0d75b847f4a3958af8cbac1c8e9529eee0698fb450c1c33da87cc4f8ac49b25be09026fd0afd634bba55583fba907f8b", 0x75}, {&(0x7f0000000840)="230f025df4d5ca22d68f252d7ec47fde552e3c81d23701d945ca06ea02a92b78517a3c58ef2704e5296be703425291f44dc05a98464f09fce630100f561dbdaaf97b10a92dde6de172101491531b9802a77f7a4124fa8586b9d4bf2b73207e8e6fb46f36cc075a17ebcf127a2e57086980a77b21cf7ca5e9edb21b", 0x7b}], 0x6, &(0x7f0000000b80)=[@rights={0x38, 0x1, 0x1, [r1, r1, r0, r0, r0, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x78, 0x8000}, 0x4000000) lstat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc63707573a156c29ba0ccfe628280889f65746367726f7570246367000000009f9cf6288e823d2c9089033d53e5b292144f7880b7318495524a1970a5573ff6d9d333c44d40d203cc577e795400ea33e7095b32c69a72434ccecc7b6e4b09a6c094faf86d77daf7266290c27a851ec3db"], 0x90) [ 585.239715] MINIX-fs: unable to read superblock 03:40:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:10 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xa000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 585.294426] binder: 10814:10825 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x7a00, 0xffffffff) 03:40:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000340)={'security\x00', 0x1000, "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"}, &(0x7f0000001380)=0x1024) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}]}, 0x3c}}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000280)={0x7b, 0x0, [0x3ff, 0x9, 0x3ff, 0x2]}) 03:40:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe00) 03:40:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) msgget(0x3, 0x20) 03:40:11 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080), &(0x7f0000000200)="a0", 0x1, 0xfffffffffffffffc) keyctl$restrict_keyring(0x4, r0, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000300)='\x00') 03:40:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 585.570514] binder: 10871:10876 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x500, 0xffffffff) 03:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x10000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 585.619723] binder: 10871:10879 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:11 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x400000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000fb0000000000009da8cc34ba3df3813a4ce517a45a097384b3d7bf550cea25e2afcdc1d5857da8d0545afedb5801ef7f78e0474a56e05eb9e78591b4afc7e1456bf85a0553bbd4ef4cda3ed694391c33fc54bff2569498f841ad1467be3418f509e29540ce63fcf25395a3137270d70c21de8959137f359aaacd76c8b40a4e0811"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:11 executing program 7: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000000affc)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) io_setup(0x5, &(0x7f0000000040)=0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x1, 0x3f, 0xfff, 0x270e1adf}, 0x11, 0x2, 0x0, 0x0, "313d877fca44d1c8019e2ca0aa4bb60457179522751a8c23c5589310d1242571887dea9e085c40c2a64709e376679d75a80715f33ba828ffd22ad1abe4261eb4"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) poll(&(0x7f0000000100)=[{}], 0x1, 0x80000000) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)}]) 03:40:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="24000100ffaa"], 0x10}}, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x12, {0x2, 0x4e21, @remote}, 'bond_slave_1\x00'}) 03:40:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x200000000000000, 0xffffffff) 03:40:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1300) 03:40:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x2042) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x7000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="010000"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="e53f2f81757561e65ba788"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xb000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 586.134955] binder: 10910:10916 unknown command 0 03:40:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x2000000, 0xffffffff) 03:40:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9701]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 586.185245] binder: 10910:10916 ioctl c0306201 20000300 returned -22 03:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xc303], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40140) 03:40:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x8, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) socket$unix(0x1, 0x7, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x8}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x4000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x7f, 0x7, 0x5, 0x8cd4, 0x8, 0x6b37, 0x7, 0x5b54, 0x6c54, 0x1, 0x8, 0xffffffffffffffe1, 0x6}, {0x20, 0x4c, 0x4, 0xffffffffffff8000, 0x4ba, 0xfffffffeffffffff, 0x200, 0x311f, 0x9, 0x2, 0x3, 0x100000000, 0x7f}, {0x4, 0x9, 0x6, 0xffffffffffffffd2, 0x4, 0x9, 0x67, 0x7, 0x0, 0x100000001, 0x9, 0x8000, 0x2}], 0x9}) listen(r1, 0x5) 03:40:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x499e, @local, 0x4c}, {0xa, 0x4e22, 0x5, @empty, 0xe2}, 0x1, [0xce05, 0x3, 0xea90, 0x9, 0x9, 0x2, 0x2, 0xcf]}, 0x5c) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) 03:40:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x4, 0xffffffff) 03:40:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:12 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xfffffff0], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 586.440642] binder: 10949:10952 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 586.450502] binder: 10949:10953 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x400000000800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03d8a22a2f7bee367ddb14566b2ed03d1ceefa70cd8bfbd21647292898c31cc9439d16fa7b86160893701fd7c5cae0b75ae0623308a6a89292d7c8f794f8282253178fdf127e7a7e2197be9fd11f8c9bbf970b6a0b1b549e450f5f3737e5ae78706cdccbce0ea4d31bf2a9c026d364b7c8afd75490cd5f0439b6dea0383eabd1340e750650ae11f9a26fbeb8d39d5dac2017c7d43f78e375d1129ed9691bef3ada333e39fe2632bfe8f981bf7914b48bd35e026022cea698b614b7328b409e"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:12 executing program 2: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r1, 0x4, 0x6400) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0xfffffffffffffff9, 0x6, 0x7df, 0x8, 0x4}) 03:40:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x600) getsockname$netlink(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x2, 0xd001, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB='\ac'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x100000000000000, 0xffffffff) 03:40:12 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x6], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x14d564b) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f00001e3000)) r2 = eventfd(0x0) r3 = syz_open_dev$vcsa(&(0x7f0000001b00)='/dev/vcsa#\x00', 0x10000, 0x220000) r4 = syz_open_dev$amidi(&(0x7f0000001b40)='/dev/amidi#\x00', 0x3, 0x8700) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000001b80)=r4) getsockopt$inet6_int(r0, 0x29, 0xda, &(0x7f0000000000), &(0x7f0000001640)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001680)={'bond_slave_1\x00', {0x2, 0x4e27, @rand_addr=0x8}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780)='/dev/net/tun\x00', 0x200080, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0xfffffffffffffffc, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000014c0)=0xe8) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r7, 0x40101283, &(0x7f0000001800)={0x800000000000000, 0x1}) lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x198, 0x4, &(0x7f0000001340)=[{&(0x7f00000002c0)="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", 0x1000, 0x1f}, {&(0x7f0000000140)="7cb9585f0d0685812016287e262a86f3603b8d0525d9e0b46d8367967dc2a237eb93", 0x22, 0x7fff}, {&(0x7f0000000180)="6d071db87dd7211371a308d0d45a670547e66112c70ed84832590e514bba51f6b3a9a47908000000d882fbcc3d091dd4e941122e6e01228c1453023a121f1d518b28f69472bc890b90e4f18581b43eca0f462679f2176239b2d6bdeb5afeac035bba34b1e74377b26d56bbe106b41e40a6be6dfe4ce06a1fb12cb910081643c887746d73233995d5f600e98806aab083550011082138238eda9215f9929195030a3f61e294de65d34ec0a0fbe4f956cfc7e526dbe6c1bd401357a72680ffb116d946fe3514841489fabfb02b1e8e7e6da602c7e0bbf08b10aa05fb19314833ea24331f45a700000000000000000000000000", 0xf2, 0xdbf}, {&(0x7f00000012c0)="ad3ccf00248f0a9352a04144b2f9cd14db55feab6061d4ca484aa21f3ae8662393afb08b254c59ec8077090f36e9227ea36bde2b6d092d902217fcffcd821968d7", 0x41, 0xff}], 0x8, &(0x7f00000015c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@overriderock='overriderockperm'}, {@hide='hide'}, {@hide='hide'}, {@map_acorn='map=acorn'}, {@uid={'uid', 0x3d, r6}}, {@uid={'uid', 0x3d, r8}}, {@cruft='cruft'}, {@overriderock='overriderockperm'}]}) r9 = syz_open_dev$sndpcmp(&(0x7f00000016c0)='/dev/snd/pcmC#D#p\x00', 0x794, 0x761002) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffd78) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001a80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001a40)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000001ac0)={0x13, 0x10, 0xfa00, {&(0x7f0000001840), r10, 0x3}}, 0x18) [ 587.061639] binder: 10994:11001 unknown command 715315203 03:40:12 executing program 2: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000380)='\x00', 0x1, 0xfffffffffffffffd) fstat(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000340)=[r1, r2]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f00000003c0)="18d3952ffd95c9de7a30fe704c47d3267557b330ed3ceb5606d906c05ecf79c0d073c3a5c3ed5db4f23b85ba3ffde0290ea86d0685beeb508ef7a735bf57a5707f5405d171bd8ba67ae26337c0d76e2d4e794a3f27c69dfaba2cc58eb43df0b7a7be6fbdef3cdbf818d8505c8933fffbd9f672bb3347de04f78b9b65ca1fd8f91758099753d6c7be9be10f286ed60a190e1e864b0f75f0e6cdc2d92f257c0c37f54037ed93709e7231f34d0da4f80713c4a1b0b5d742c041a812bf2c47cce51fe544d0b5d3a28e8eacf1df6a2162a7dd9165") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1022}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, r5, {0x0, 0xf}, {0xe, 0xd}, {0xffff, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) keyctl$chown(0x4, r0, 0x0, r3) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1007}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x191d, @mcast2, 0x20}, {0xa, 0x4e22, 0x1000, @loopback, 0x40}, r8, 0x9}}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 03:40:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x800000000000000, 0xffffffff) 03:40:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x98e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 587.125504] binder: 10994:11001 ioctl c0306201 20000300 returned -22 03:40:12 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x3f00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 587.189806] binder: 10994:11001 unknown command 715315203 [ 587.199897] isofs_fill_super: bread failed, dev=loop7, iso_blknum=32, block=64 [ 587.213264] binder: 10994:11001 ioctl c0306201 20000300 returned -22 03:40:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x7f, @empty, 0x4e22, 0x3, 'fo\x00', 0x10, 0xf5, 0x77}, 0x2c) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066308400000000000000000b476cac1e4710cf444fcee57613bc95ee43b097da25c89da3b9b97c5f3be0a7ac6a19a25b80ee1b16ae6f55c5c9c6272881b075e"], 0x0, 0x0, &(0x7f0000000240)}) [ 587.272368] isofs_fill_super: bread failed, dev=loop7, iso_blknum=32, block=64 03:40:12 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) fchmod(r0, 0x181) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='vfat\x00', 0x0, &(0x7f0000000200)="bb234cfa02973e6650d4f791315a39af06b4120adb3163b2c0c199bfe2e9e570b86f1533580495db43a0debd2406edc0796d5f6bcdffd674ebfd6175a9deec9a0f86ec12f979d39fde0f0d7089674d247d40e795788651a5b8f24a9f74e5701c0892396afd433729c9ec5f60200186a7d6f4751fa5ad18da0f39060e893697c52798be3146a9ff892690ae55d639d146c32d245f8091ec4aeb509ceea14e74c895a1963dcd4a5bc2c974f3be496e6d60dd6f4fd25774829e91b78e78ae82058c") mkdir(&(0x7f0000000180)='./file0\x00', 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mount(&(0x7f0000000000)='[::]:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x5, 0xffffffffffff8001) 03:40:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb0000040) 03:40:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x74000000, 0xffffffff) 03:40:13 executing program 2: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x8c1) 03:40:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8e09000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 587.463687] binder: 11042:11047 unknown command 1074291462 [ 587.487660] binder: 11042:11047 ioctl c0306201 20000300 returned -22 03:40:13 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x800000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 587.528969] binder: 11042:11050 unknown command 1074291462 [ 587.543121] binder: 11042:11050 ioctl c0306201 20000300 returned -22 03:40:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 587.585568] libceph: parse_ips bad ip '[::]:e' 03:40:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x6d, "a4892b0643ed9186f7ea64dd86e6c3ac1d35a65f901d1ea761ca78ea0ffaaa561746494cecd8327b08abb04febc4c0ff4fd83c9d8649c1ca8445e94b3859dcb00360dba048a18b6eadef992c2ca837ae6a038823a040063da8c6f10abd6cf7cc03ef1122bf90c07ee606a1ca43"}, &(0x7f00000001c0)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000200)={r4, 0xfffffffffffffff9}, 0x8) ioctl$KVM_NMI(r2, 0xae9a) tee(r2, r1, 0x5, 0xc001a7a23736e09) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 587.642617] libceph: parse_ips bad ip '[::]:e' 03:40:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="b2bdf574b5d4203509ab7fcbddb992d7f73d5fcd019521439faa6ee2e44393c5eace8c7dcc0ccc35bc1ef3ded6e3c22c6b0f0cba85638f6e7cd3cd0aca958e4e08441a5edbed3df58b83f61f073fd6431b4133e7a1fa2798762bf07ff87625f232007a93ba530c5ec81e2653b3ef609e2227ba10ee768bb99186ee0c4110618294011900f761023a172c437f4717b4cfd5f54f13500be8ce56a68ad2e127dd82e722c5ba46f2df44d34fae6383971594ac726f3264eb51dcc8bac3f6", 0xbc, 0x800, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x90) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = geteuid() getgroups(0x1, &(0x7f00000000c0)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) r9 = gettid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{0x8, r4, r5, r6, r7, 0x50, 0x7}, 0x7, 0x4, 0xfff, 0x8, r8, r9, 0x100000000}) [ 587.781847] binder: 11079:11081 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x7a000000, 0xffffffff) 03:40:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="700000008052b908f984179a07dac8bac6edaad2e3b4192a76f56ff6b05d9fdbb586736e2308322b8e30b99c7d087d0e5c82313a9ece8d2408a0678ee16e6e4c103066a405d81d2a5abeda7f3475e8f2ccc50ae292cfb093a929b3e55ee9bca21da7b3da3b3de046d445286a0000000000000000673d36764d56635cdb146b392f60d455c3f4f5da08f16e6d88ea45cf4d83b4313002f93af13eff6ec74ddc76bb073347d9"], &(0x7f00000000c0)=0x78) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x6}, &(0x7f0000000140)=0x8) ioctl$sock_ifreq(r0, 0x2000000008b25, &(0x7f0000000080)={'nr0\x00', @ifru_map}) 03:40:13 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x8000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa000000) 03:40:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x90000000000000, 0x284080) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) [ 587.825569] binder: 11079:11083 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="d12ebb0ec85e0b435d4dce253c377ebd98052728bd7daee20f270198da031213fb0a6fe27e68f770ffe1b0ebc35d84d2de391c0743c502623d66b9f3e59931c1817b64a0fe59c328251260aaadcf6e4238df4f59a5ef4b"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 587.974254] syz-executor7 (11088) used greatest stack depth: 12184 bytes left 03:40:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @mcast2}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$sock_timeval(r0, 0x1, 0x2d, &(0x7f0000000000), 0x10) 03:40:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x5000000, 0xffffffff) [ 588.061632] binder: 11098:11104 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 588.093921] binder: 11098:11111 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:13 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0xfffffffffffffffd, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'trans=fd,'}}, {@cachetag={'cachetag', 0x3d, 'md5sum'}}]}}) 03:40:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0xffffffffffffff4a, 0x0, &(0x7f00000000c0)}) 03:40:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:13 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xb00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x8, 0xffffffff) 03:40:13 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)}], 0x4924af6, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 03:40:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) getsockopt(r1, 0x40, 0x7fffffff, &(0x7f00000000c0)=""/47, &(0x7f0000000140)=0x2f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 588.351258] binder: 11135:11141 ERROR: BC_REGISTER_LOOPER called without request 03:40:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x830000c000000000) 03:40:14 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x20, 0x40) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x3}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(0xffffffffffffffff, &(0x7f0000465f8e)=""/114, 0x3e) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x100010, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='w\x00\x00\x00\x00f\')v\b\x00xnet0(-\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00001e4000/0x2000)=nil, 0x2000}, 0x2}) close(0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 588.391887] binder: 11135:11145 ERROR: BC_REGISTER_LOOPER called without request 03:40:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) 03:40:14 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x600000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:14 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x638, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x5b2, 0x6, 0x1, 0xa1, 0x9, [{0x0, 0x7, 0x5, 0x0, 0x0, 0x880}, {0x7ff, 0x4, 0x401, 0x0, 0x0, 0x81}, {0x100000000, 0x1000, 0x81}, {0xfff, 0x5, 0x200, 0x0, 0x0, 0xc00}, {0xa06, 0x8, 0x1, 0x0, 0x0, 0x400}, {0xffffffff, 0x4, 0x10000, 0x0, 0x0, 0x3884}, {0x0, 0x4, 0xffff, 0x0, 0x0, 0x908}, {0x2, 0x8001, 0x3ff, 0x0, 0x0, 0x1400}, {0xff, 0x1, 0x100}]}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, [0xfffffffe]}) 03:40:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x48, 0xffffffff) 03:40:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 588.630891] binder: 11167:11173 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 588.678354] binder: 11167:11179 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:14 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xf0ffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = dup(r2) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x36ff, 0x5, 0x32de, 0x10000, 0x1, 0x2, 0x8}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0xfddc) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e21}, 0x10) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="d5556852cc9581ff446314e10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockname$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) 03:40:14 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x0, 0x5, 0x8001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) sendmsg(r0, &(0x7f0000002ec0)={&(0x7f0000000700)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b80)='x', 0x1}], 0x1, &(0x7f0000002cc0)}, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="db", 0x1}], 0x1, &(0x7f00000009c0)}, 0x0) 03:40:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xf, 0xfff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r1, 0x2, 0x5, &(0x7f0000000000)="1b49587b6ebe67b5532cf13c46", 0xd) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x725, 0x0) bind$pptp(r2, &(0x7f0000000440)={0x18, 0x2, {0x3}}, 0x1e) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063085f19426663397acc4e636ed4fcffffff0040000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x97010000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:14 executing program 7: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x141900, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000580)={0x9, 0x108, 0xfa00, {r1, 0x2, 'DUa', "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"}}, 0x110) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KDDELIO(r2, 0x4b35, 0x5) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 03:40:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x801004000000000) 03:40:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x700, 0xffffffff) 03:40:14 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x8], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 588.983734] binder: 11205:11212 unknown command 1594385168 03:40:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 589.028873] binder: 11205:11212 ioctl c0306201 20000300 returned -22 [ 589.052642] 9pnet: Insufficient options for proto=fd [ 589.067010] binder: 11205:11226 unknown command 1594385168 03:40:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xf99, 0xffffffff) 03:40:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f11f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 589.080358] binder: 11205:11226 ioctl c0306201 20000300 returned -22 [ 589.105829] 9pnet: Insufficient options for proto=fd 03:40:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0), 0xc8, 0x0, &(0x7f0000000240)}) socketpair(0x4, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 03:40:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x48, 0xffffffff) 03:40:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7f040000) 03:40:14 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0xb00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 589.325547] binder: 11248:11251 unknown command 0 03:40:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x7, 0xffffffff) [ 589.352191] binder: 11248:11251 ioctl c0306201 20000300 returned -22 [ 589.416828] binder: 11248:11258 unknown command 0 [ 589.422363] binder: 11248:11258 ioctl c0306201 20000300 returned -22 03:40:15 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000200000000000000e00000016", 0x31, 0x1400}], 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1}}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000240)="0754bfcdeb4dc324b54b8ce1d06bb24dd4092a1963458991d63685e8be85e4760a52f3ab75a4a614a1a35a1d0b1b3601b34754b90ca588cad166b9fca87632388c1f78ec9b5a26353163e43d45ee1d70b17a14b0257106000b440e7f1468efdbd2846902842e6c2d32781b2395ce13a2b5b5102bbcfc552085fbbb281533cdbf8aca60ef62886877d295b4d01c3402eeac0625fe0bf46a15f8f60c7df4061549c96d4b9263d815106ab79eebfe27bac80dbbd33d2f9e9d97e1a1968e4746c65f69a4a6625f0c2291a24e1f2a5abdf2407704f975cac0f67f7219a5754af456d5f2a939b5093c592e41", &(0x7f0000000140)=""/24}, 0x18) 03:40:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB="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", @ANYRES64=r2, @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES64=r1, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYBLOB="e5db14f76ca87ace3e8b231366c53f2e8f43172f1569a5e6ee23760cf9fb9f82a42fd5ff8da13b79225541ad3e57dc8e82e51a3fcb4e8cdc236db77575e6f38d367398dea7db55c1e499468789fd64265c424c8fafe681827859c7251a989dcd1129e165810635a7e0f762c0b3f8d1ec7e32ff861a41715ad7bd362e75771df91208c1250130fe8429bb64b536ace65fbd09bf06bd6262e8e7b7c06ba59adda5dc063b9cbac04a62b83491adba76db295a68114d5c44404a8dff580ee4bcc2963137b4d99dc1e7ef6eb01fc0ebcf70e80ddb294a7029ff06fe8efb4128a04654ec00504f767759e50cf3d8b24bc9e94a41cac9", @ANYRESHEX], @ANYRES16=r0, @ANYRESHEX=r2]], 0xfffffffffffffd8d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:15 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x4b21a8bd0c], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x48, 0xffffffff) 03:40:15 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = semget(0x0, 0x6, 0x40) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000200)=""/188) kcmp(r0, r1, 0x4, r2, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd10d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6c00000000000000, 0xffffffff) 03:40:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x197]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b) [ 589.889016] binder: 11290:11298 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x48, 0xffffffff) 03:40:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 589.943241] binder: 11290:11298 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x7400000000000000, 0xffffffff) 03:40:15 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xfffffffffffff000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8000, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x1c7, 0x12) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.019200] f2fs_msg: 6 callbacks suppressed [ 590.019214] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.030841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 03:40:15 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000200)=""/183, 0xb7) [ 590.071061] F2FS-fs (loop2): Wrong segment_count / block_count (22 > 8192) [ 590.078210] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 590.088018] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.095513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 590.103769] F2FS-fs (loop2): Wrong segment_count / block_count (22 > 8192) [ 590.110967] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 590.130917] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.138261] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 03:40:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x400000b7) 03:40:15 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x40) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getgroups(0x2, &(0x7f00000000c0)=[0x0, 0x0]) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0xee00, 0x0, 0xee00]) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000380)=[r1, r2, r3, r4, r5]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 03:40:15 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x357}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x20000000040002}, 0xffffffffffffff73) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001840)={r1, 0x80}, 0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000001800)=&(0x7f00000017c0)) fcntl$setlease(r4, 0x400, 0x0) socket$inet6(0xa, 0x200000000008, 0x3fd) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r5, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/104, 0x68}], 0x3, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001880)=0x2, 0x4) r6 = getpgid(r5) getpriority(0x3, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) connect$nfc_llcp(r2, &(0x7f0000001740)={0x27, 0x1, 0x0, 0x5, 0x88, 0x31, "2e6d279d062006508e73cfe8b490aae2c05b6d1d39abcb7833db9566ef78755ed8c34f5907709c3f205c343bc3ba21adce04b65e64e77d3e772cac471adc3b", 0x10000000039}, 0x6) r10 = socket(0x10, 0x2, 0x0) signalfd4(r0, &(0x7f0000001640)={0x1f}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000016c0)={0xfffffffff7fffff7, 0x100, 0x7, 0x2, 0xfffffffffffffffb, 0x24, 0x3, 0x18, r1}, &(0x7f00000018c0)=0x20) ptrace$pokeuser(0x6, r5, 0x34d1, 0x3) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f00000019c0)=0x274de6c9) sched_getparam(r6, &(0x7f0000000100)) setgroups(0x0, &(0x7f0000000000)) setresuid(r8, r11, r11) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) setgid(r9) 03:40:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x4000000, 0xffffffff) [ 590.324841] binder: 11339:11343 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:15 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xfffffffc], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 590.429216] binder: 11339:11357 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9effffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:16 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x55, 0x7, 0x6, {0xfff, 0x4}, {0x2, 0x3a4}, @period={0x59, 0x200, 0x8, 0x80000000, 0x9, {0x81, 0x2, 0x9, 0x1}, 0x1, [0x20]}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x100, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x8001, 0x1, 0xffff, 0x6, r3}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) readahead(r0, 0x5, 0x100) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x10000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000014) 03:40:16 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000340)={0x148, 0x0, 0x2, [{0x4, 0x81, 0x1, 0x1ff, '$'}, {0x5, 0x5, 0xd, 0x8, '/dev/binder#\x00'}, {0x1, 0x7fff, 0xd, 0x8, '/dev/binder#\x00'}, {0x0, 0x80, 0xd, 0x6efe, '/dev/binder#\x00'}, {0x2, 0xfffffffffffffff8, 0x0, 0x100000000}, {0x2, 0x40000000000000, 0xd, 0x1, '/dev/binder#\x00'}, {0x1, 0x0, 0xd, 0x47, '/dev/binder#\x00'}, {0x5, 0x77a, 0x2, 0x8, '}\''}, {0x3, 0x6, 0x0, 0x5ad892f5}]}, 0x148) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10630840003f000000000000"], 0x0, 0x0, &(0x7f0000000240)}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) 03:40:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="01", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x90002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x43, 0x2, 0x2}}, 0x14) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 03:40:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xe00, 0xffffffff) 03:40:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:16 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x10000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000108) 03:40:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfcffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 590.715840] binder: 11381:11387 BC_DEAD_BINDER_DONE 0000000000003f00 not found 03:40:16 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) rt_sigprocmask(0x1003, &(0x7f0000055000)={0xffb}, &(0x7f0000000140), 0xffffffffffffff19) r1 = getpid() r2 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000180)=0x4ad2, 0x1, 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x100000000000029e) r3 = dup2(r0, r0) signalfd4(r3, &(0x7f00000000c0)={0xffff}, 0x8, 0x0) tgkill(r1, r2, 0x1000000000001) [ 590.763485] binder: 11381:11387 BC_DEAD_BINDER_DONE 0000000000003f00 not found 03:40:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x4c, 0xffffffff) 03:40:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:16 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xf0ffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) rt_sigaction(0x0, &(0x7f0000000100), &(0x7f0000000040), 0x8, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r4 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x0, &(0x7f00000010c0), &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0xc0145401, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:40:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 591.005570] binder: 11421:11426 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:16 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f00000068c0)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002700)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006a40)={0x0, 0x1c9c380}) 03:40:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x10, 0xffffffff) [ 591.101949] binder: 11421:11436 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/93, &(0x7f00000000c0)=0x5d) 03:40:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 591.331298] binder: 11441:11443 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 591.391568] binder: 11441:11451 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8e090000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:17 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xffffff9e], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:17 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 03:40:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x1200000000000000, 0xffffffff) 03:40:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb000004000000000) 03:40:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x401, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000240)}) 03:40:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x3e83b4f24606871, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r3}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e80818cb9ae8e1363ba56450e34ab07007a7681b12960d9aae42651b85217301c52102cb235b605225ba4238201a5698ce72e56da764623a193744747b842114c8a4c5327917b38a30867a9fd5483acaea6ff4d8edd59b8fa879c3af33499"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 591.652640] binder: 11464:11471 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 591.660911] binder: 11464:11472 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:40:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x8000000, 0xffffffff) 03:40:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x4, 0x4401) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2bafbb9c03"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) r4 = pkey_alloc(0x0, 0x1) pkey_free(r4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='syzkaller0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000140)=0x20220, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getsig(0x4202, r1, 0x1000, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="106308006f00000000000000"], 0x0, 0x0, &(0x7f0000000240)}) 03:40:17 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xfffffffe], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 591.899393] binder: 11491:11497 unknown command 549648 [ 591.921312] binder: 11491:11497 ioctl c0306201 20000300 returned -22 [ 591.934093] binder: 11491:11500 unknown command 549648 [ 591.939578] binder: 11491:11500 ioctl c0306201 20000300 returned -22 03:40:17 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x101200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="0a0775ffd5e383e5b3b60ced5854dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 03:40:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x44d564b00000000) 03:40:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x98e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xc000000, 0xffffffff) 03:40:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000000009371, &(0x7f0000000540)="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") 03:40:17 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x3], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 592.211471] autofs4:pid:11520:validate_dev_ioctl: path string terminator missing for cmd(0x00009371) [ 592.256377] autofs4:pid:11527:validate_dev_ioctl: path string terminator missing for cmd(0x00009371) 03:40:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xb00, 0xffffffff) 03:40:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r2, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16=r0], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYPTR64, @ANYBLOB="6658d868a5818b469ebb2ac1e5fd0120b43796a5a86f33aeae03433c52f0e5bfe189e3e54e33568de2b53a340e35a1bd21967287e7dee7db07688d188778a4e4633a86733d9ebd34ac0b2f973a76d9"], @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="3ba7f35da083d6bc833007c0b8e2104543dfdeb4262b9f40a86938bcfa"], @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYBLOB="45cf0bdca29a5bf358f8ad893333752e18302019374dcda2641dd231f4c80cdb6062b13c0aaae5da5fc062ef4c907c094a4776f5ef8a1591f0daf60b53596181c181d08044a4cf3897734fa707eb7445e1", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYPTR, @ANYPTR64], @ANYRES32=r1, @ANYRES16=0x0], @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r2], 0x2e5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="ff1fc4e18ded31c4e1fd5b598666baf80cb8f87fc28fef66bafc0cedb9e80a0000b8d4480000ba000000000f30660f01c8660f38819f00000000c7442400c4690000c74424029772f926c7442406000000000f011424660f383f150000000066b89c000f00d0", 0x66}], 0x1, 0x0, &(0x7f0000000000), 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:18 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x9effffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:18 executing program 0: socketpair(0x1a, 0x800, 0x7, &(0x7f0000000140)={0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000180)={0x6c, 0x7d, 0x2, {0x0, 0x65, 0x5, 0x40, {0x2b, 0x2, 0x7}, 0x8000000, 0x5, 0x71, 0x6, 0xf, '\\keyringvmnet0,', 0xe, 'vboxnet0*eth0-', 0x14, "9d62646576707070302573656375726974795c2d", 0x1, '-'}}, 0x6c) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0xf344, 0x2, 0x80000001, 0x7ff]}) sendmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000080)=@ax25={0x3, {"194dd02bc3ffd6"}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000014c0)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x4c, &(0x7f0000001400)=[{&(0x7f0000000240)="67f3ae907d6f44b941310ee4f246c5e9043ebfc1c3dedcc37b98088159aea63d2d00a59f5eccd19660687135e097975532c00de64533e59bb491f4518d54f9d8a9a93fbf69edc48f96e6dc354eb36795880fb8bc43240c1f4bc7c8e85eb69d7306e21c0ffd9fee89cae712ce73180cff21d2be24d14427ca8cbb87ecbe80f4b72eac13b07330bb976a8bc5625132c7f878c7a6e7017385a1bfefa67ba0dacbea2fd52aedf78f8f0715e68c2991be6ce6c87b2a0c970500f40fd2f96593176a9c2335f869c6326281ef3c2802913bd279ec640fe1de3792d66080059cf1f8b685cbe986406857d5aefaf6b3db6e39a2e8a82837e9b60c7f110dfcb013d84c30c79f44f8f7c1aa1c64c4ae8012c8b22d6339458a52728fe7d4d549746eef1e734b386fbd8ff4ec785dffeafcb205ad32e05587396298550faf02affa166fc28db212491c61c897ad0e338803e574184d124a0b676265436e8c844190e525869123784faa5599685a7838ba77b9b59ecbcabfe5c473528a1d9abd7d6edf8186427a8c3f52e1672e25fe155f45ec044fde9002531631248cf8d021b2804ca593897fed7ea6d750a2a7611d2d46ad261d8c0710198cf555ce43f5f65412c1c0c16c9b9a818c33fdd544cc1156f28f93a825a3c3d562ba255a7d4c70dc4c9c4cb1fc489ac96888c4613ecd20eca61b66f4db8c22666b68279726e2b494b1e4168455c8b94baf166f1b199869096422db7323ce9f3b932545764c45f300a38c9ca258fadf67573aa62a74e99b7c72cfceb722b034b04351e159120cd65a7ff1f75a4582abd991ffe4bf7f4d9abaf0f4af8f1da6ffe374e0619e5f6b7738cf87cf8b3db505f89ce5d1aafdb0be9325822ceb6f956237106d34752cd510413cd1685cdcf9cb6584224023207e032eb34e7618db743b9a2597144dcad99009b0d240fd28883942137f1fe91b8eb7fee7cf000c28128ea53be9fc5cc2f228e516a464c49092e92d288a9443580ddd082385dacdc18e6e58a55e78249fd1889843b11087605350d785d6eae1f1e8d7353e9ecf13aa750f40b169fb4a02fdbcc76847f631de0a624c5363f7b79e3bc840bd42a2826b1e43e357471b700f286a626ff83a450f470497a55a57a7f83c821c0234c76f1b455fee4836723901d46aa11963c8843ded99bbf1aba9b6070d038a35ed2b9a43eeaae3c3470b64d18d4a4acdc840df57bcebf8da368a7d02231af74a9739fdee77fa904b0f74b97ed3f9320115a19f36a8041fc6045aacd22cbf0cf3417e9a3c328105c81d7750d3232dfd44221104cbeebe58fcee2fc25bfd6293ee25eb8d107293a1a479c38d76a0d047e30d56912fa16139fbd45256d4faada09fcb43308e5078aea07a14b2de168a4be8a40c1c474ecdc1390d8d9d23b430cd854701ef1763a76708aa62e3b2139b5882e331589397f4b518010ca2ab202a02748f648238ef24ee41a8313aad9590da027e040f1e059fd017551c5f3c207f5df203a05fe9d31c6752cbb4d5f46818ceb94fe6c4b7b60fc7770d97b00622c110bc7f58a3115f5405231942cf98bba1b46f4b728163fc3a5af9326224fc3a97af6da83b64adf7f87f1e1facd6c3f623bd84e73a92f8cede52cbf239e9a31a4f6c02d0cdc44f6a594770a85e6db9a9863ffeeb9bc41de80b1204acddf79e6ddd1ef2f3b22eabcbd132385d8d8e2ed335321abdb12843166b30867623c13e3433f5ca10f8c52692d971a62f4a7f2ce53be97107281f295ab5fdd0e19e3530e2443d9a5fbce89183e8f3584e5a5777b3bde1a0c5452a7751a5bae627947d726a11822882f05a6b223d2f9f145ece95d40540a7d853f515221c4c78d6ec8a478a9eb360dc4bc59d8d5d442f8f7abb31c4b9c20f028a01b339aaa23d3dada5becb9e566c88639039c6f7c13173579aadc2e92a57b3b136ae74aca7681bd1e10b60fc5ff712cedd9fa6e092a114a2724d669d06a7a7ed4babb28e9ed976c7a513451326f24b5656d857bd26883d2b3bbd0dbb68d0ca550ab1e9254bf3195e657abc34bc2c2986dfb2c7cbce5a1011ae85e8b8aae733d309eb96c4ac69c2db90b248cb7fca54bba09f3da7b63ffb2fa2943867340b6baf2f6e2bb1a07600dc1dabebf22f2aefa26452aa5f7e1a483171595ee0895fab6388d650dbe5e18811b654da46ab068b53569c0bf24a33aab50a1d42b2f5907e1420fbcd5b3804f26b33c94375a50ceb09e2458ed0bdc78d88cba0d2d686586df993136a4e9752bc2d9d6f61923e0a10f1a2645aa0b24c9f205fb95924203a9ee1f6282d7c0fc33d1603bad8c55db9bc35ea26d263ed509a557e769b3bfeddfc21ede23e77f7e7be74df93cdc48f094807d61ec819e16a8e4cbc0d2b14cc75d8100d0ce81e34341fee315d7f1d78e8286d676a06ef496435e8f6211b71a3089fabe9dcec22c400bd350de91c98255223978100e415e2cc15999f86d5064f6704e7b36e7e9072a878e4d2bce4a56905d82fff99c7722248d46d96c7312af01bc6b4bf4c5dbc642bf740cfdf367cd27d12d90e53a78313426f163f898a0c6169b7b4976c073b79c0576bf33f51387c0588443bb2d53e01684e719718042ce6ac340b323cfb8ba19e66c3b9aee51070e514558a16fc5da7e6ac14a5502d423204503b69f4091587dae11d92cacadc4ca32af84c18655d1c24210cabd8c0196d360cb14b0d421fdcc33d259d09154f9cda29c2be7b4083a6876179a5a44c8fd3919449bb10c96a561e17330b88ab818155d96849d403a950a78cb99cf446a9752b9a5f1bdb16ad58643617f4571d7b69b6d67d4a90bc7ec4d9a32f837486223fcd406e43338f82ef5893bbace49afcf89abd5abf0a2ba518b0d4b4a2e0774c75335ae2e1e9bf12663ba63ae752fbee571aa1a66687182b16743ca6c5b897e06306501bc4a41753ecd61effc887540ad6b5245754d513be7a74f0f9002ca68643e8b5b7b2666375b502446c1c830a3457d64f995ddc9c79a6e9d0d81c178e6e701b499d2cdaf1e13f2ff762697f97d849be58a6d774e65348328feb3bd57cc06ccab74af41a739d610e8f54d5ef4d6526583feff7daddffe66a4c09c670e09ca809d3bcd529c9d8d563b4ffe907378a99e48337ad16b17cb7f63f77ed65acccbb1f36d0917751136c8ebd907474baa46331618485ee3e04fef3bab58e8f931c5965d7c4608907b366824d82c25038152c87d4178d0b4c70ec7da450c8d8f96672d0abcb66a7295fd9389e061121fdef359ea1c14de7d908779c249d5c03c49ff6f7c58a8253a9dd2cd3aa498fe150bc33869dd11ba8baf9200270bd859e8da371da9cd8c6d2658667f359c3b5e4d1108b1c18b45179d985bd8a70db334eadfb4f1e8a0ee6ba9900a49e29a0b7529361eb82f557f0d45e0424ae4536ecf38bf8420172ef13dfb05f149f9d832b8c0df8c5f50ef2fdc9597506b080266cda1b34125b63712bf2657e9e4d2d05b7ab805181bd5f5ed3d28770be8277594f164a698fea1fec2bb62b38569813d141b741f86fe61883e8f6d46e378d9a6968348e27da70e3ac91c80d1bc83c1857bea3df30f68327963fa00cad3ac8fcf3270edf0ba7c1d090275676a38f04b1afd874597abb4b39f49f6a51790765f23afa58cb731bcffdbd9d6395316cadb318f5797f2d55cd740f1b3ed26eb6cf032dbe16048f8974f5e105ab2baa52b3bd1da2209b863e2e355ce2f2777e363ba7fba32d314643e5fffa9d118c3fc164c4582d2f3c0515f1c4f195fee5b075e044ee584f33f6683c9dbafc08284adb43ae0ebe41fd61ad6759c6c4279d2ad404999eafd11251e17aadc159603f0e784b1d9ca9770f730a61f4c04ec76c0b686f26491c461af06ccb5a8c39c4b4c7a0b5e5e0d8e6ef9328e790f661120a736ae5844ea6bd78aec327310d9d5c94367cc7e27059b699b47f1a5fda876fc8f4851445dec89f3f873aca3ffdbf0979e210efc7e6fa5e9979ef2af97da6d8d22e99ce7b9e148440159af21bca6cf17dbd07c5f666aeb4fc2ea47c5483abdb679424266241a88995d8932d91d49922f238f10452c57ef62b30175e8b82ed511b1827f70486f59b860d56eaf99c040c5251b6d441b91da11d66e5e5a74ce1761903dbe601205cf2cf32fddb7c46453fdb12841f2ad4d0a90c677c060db963b702484c4b0034ad4ce56e3c4a3f1f9929ad041d2dc84e8280e19d6df92ffe3a33e6fd98e82650eb57725f919570db7ae8c811aa910fde9cafa8057362224a6097c9d975e6ecd2d364de31949ad6a4d511711e130868afdab4b63ea3d21a2ed7f6d29ae7fded4f4a74eaac0fe28c8acdeced6641b21afd8a48f0c144992913cf467a3765884917fc44c828640e172534d11129c6ada0bc56567db0fcb27504c1415fb44ba12f5e9b3cdbd79f8829e54bb8f630d03d7e21e588b98c5bbbc3d175a6d02d00edf779d45e02d3f2e8efb3d963f5ab1cd8a7dcfa4e1542598fde9906558559b7a90e3c11e8143836e2a344b077a886b08ffef79adb2024ff71eb978517ad92e1874de8ebd43996dc72e712648e6154fc0a68a25448d2249c72a6221111a7e43fc5286b7cb3c725836cf3cd0fc772a8615d415380285d8850568606d960993df1ee80682dd0a61042101c1f5388e2a51c24f4ab13d1c68c99ed619acb733c4623aca61881ed0597b85093738f16054ae5049997c659e8f40e04a3db523af855d567fc3644a4395d8c9f2662d8840d1aed4a6822fdecd8f00ff40579373f457c0e4bfb477ace0541d72dc013615577dc7b2e12881435f15bf1fe63b05513ac7b44161c46c02510f3579bb883daee88e01cc8d3f1d86ed8f1feeb66958cac918f799877bc603b64af34745a4b8b83138d1fad10bdf10e17b9b48a664e20180bcdad12d1a78030b4b352914684b977509f96344dccdf170550f567f4d46480a7894c00905d3eda56290e960eab2e63625eb8817e460d9a1aac0b2ab9d54429ca4e8e637e9d464f5a5a63cc9ccc45b5721d5d1cc35011393823164fc980d755d12ef01c58a2f8f93f03d6d80dfbc479775973ebfb2998628a7391e84fcea675149d330b5585ef39b87a8a7edf1ec31a4ba2e7e54599e6edaaacbfafe986faa15d8300da1c3c86dc1e6c8be699da8ba95d588577fad6fb300ca814f15b970933f05ed9697d5cfdffe1003e7e89319c427aee2e5e14a68fb0e6558d80af88ca5426ed6965dfd036a0963c0016109a669dd5583c1955cd12deec6062aa791b8ceb385f2f4e0cabfacde6b641de70b2071748dc0b2c33b63039bd106e1562bc2a89a4518c8dad212ae1eaf738e41bce38592bc362f3dc8bac531dafb8ed301401b4bd1908c7be902e21d2508fae6f694cecb07add8d5a197966735acc4f6421e3f34754a5ab05ae244ad01495fe622e0f38aacd3959bfaceaca1ddc757dfb1f0c6c5db71e9c5778dd60880ddf85b55f95191d75fb745fd5ad4dc209d01084b97f5c573d91674d736a8dfdecbddcce3d0fdc4779a7f586300d4d69b75aed80644ec7ef81052c907bc301c8c5f9a865eaae0e7ed563730144b6e5f3ef05e159db6b959850562a95584bc90e73f4b3e2870cd86e1438d188dcbc0e90a631058f48d9ab1ae4a43860cf9c171fc38d22bdda7103c7b48d41d621e0eb28d8b4a48ec5c6b4928cf22773f4db402d14ab27993daab26ac019607f858f02d2e8e39f79a77bcae8a55cd9af3dc7110352241338bb981441dcc71884b09f46da87dbf5fd8f8158b95d8dae34db4a2d1ac6ec12d31d983492"}, {&(0x7f0000001240)="f277e4c5299bc57c8ad3c6aeb6c2f6cec9b7fe8641f32b7383292a836eca15399de26412f70c9338995af9896068acd97a12a62408a726d66dddca6ff27ab55955b85eada2b0143c875ca692e10b3796ff977e294d503f9067e844ddc520626c005529de4e745aad49760c60c2acb2e1b8f9f17d6f607d6ee4ff1df6b63880369cc47c45f676ce22"}, {&(0x7f0000001300)="dc296a5b6fef540e0fb9da7b1c8ccae01af137049f5c9e0e5c00a8c033b5e9b9c70e6162a11e0b9ed320c1ec67563dd52b0841a3c1eb07ce02a5"}, {&(0x7f0000001340)="ba945ab06391d1a0d326f830b626263ed3fef439df45502325beb1a7c21cb37166fc9d2ec4a6d174702bd3c37f7d85fd1c654ca704a6c934c58ac1656414073d88db4ecefda73d851f6b3614a1c6b021d4a997580b20d97924e9aa556352a4f0ac19a3982ade4088d3ddf72e1185e5489b41a702a7e639db463934938b0c986274753a8ec0beb7461f605f03dca97db645129eb56bde"}], 0x1000000000000094, &(0x7f0000000100)=[{0x10, 0x1000000, 0x8}], 0x10}}], 0x400004d, 0x0) 03:40:18 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xf7}], 0x2db, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000774000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, &(0x7f0000000000), 0x100000080000000) 03:40:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c00000000000000) 03:40:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x4c00, 0xffffffff) 03:40:18 executing program 0: clock_settime(0xffffffff88c26cf5, &(0x7f0000000140)={0x77359400}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f0000000440)=[{&(0x7f0000000080)="f39e7f794ef3c9e7830f2e0943e233aaf11b4ab970e4036475841b5c2291d6090d2f2ee1e0b809cbec1ad25dc96ebadb1ad368d68c37c615204f54b914b1f148b01941c1a191f9ec815f19ccb3348a6e77e2bd3b00e6d8a5afd5edc4b7cd70d88e3c138b6035c75d1f8144da3b77ff88ba78a0c86e8601b201f4a36aa65eb1c0f4116db9395627ecfdb640a5421c", 0x8e, 0x694bdf62}, {&(0x7f0000000180)="ebbca4a499980473223fd3d6097ed5fe99e81d7555f615c0515f303e201d4feb62a8cd585f6c24913e378400a09768f56e0fddb9265e4e87495827f45195cf12d743c906454333d0e6656321a1327d0e485432c33c729c48e6b50a637c51b6dde2278b2a95fa94ed3a5c326d8e29112239e7b2aee6674f9d6bbe0d71f4034d", 0x7f, 0x8}, {&(0x7f0000000200)="581eba0797ad2bc4a87a03fbf3ae68ac62213ef2520df30243240a2115f920d2241c035226332a823e197e0e11cdc4199220d548cd0ff7f921c795b0fda50f42815768a9540b27976fd62db3be8fc740d3593ab9a82e4b90ff91666c7c82ed9a6f2ce8428286012b10a40d50d51465570db4ef962019ae5cfa422ebb005b023bfdb14460d81d4b51e62497b0a1e2cbe36c97f9ad028524f92e3d87a65b04d0e7bbf3b3ef160602b3914823afe12553557bd2703943dd4d3565", 0xb9, 0x80}, {&(0x7f00000002c0)="3a9d5646ff647a70010626780979271aeccb28f1863d9bc61c2763aca7d7b4e98b40e010934beb4f2eae0bf4ac7073313c3cf0e2436c48d56346b5c5f34b115adc892c2c7cc4b71363ac227c8c3b87ff6bbd707376eada0839d1af7e3cf4927120adc5e60348704243e883539e607d26037fad5f4cb1632a655a0cb44f0d3d4a201373c7475eebc3094ba5df06e8f2762c4884f40d7b0b9ad34bb2cf1ab25916dd6769e78a0e0399cb7e813eda4b5b", 0xaf, 0x2}, {&(0x7f0000000380)="1339f125c45ca48f291748566409d7e1bb4055e6c38ed5cc0f37c66c29271d131d32298bd36c9d66999853442535c18ee55ac18b5d08ea354048e644ae2b8fde7588b5434a18524cccb1073cc781a7fc17a45d511fe09b78", 0x58, 0x5}, {&(0x7f0000000400)="d0f7126219f0ecc2cb1ca3122c8d0f0bfcc88fbc71c5b5108021fccec9a9dda0114fb4683b3a9156d8", 0x29, 0x52}], 0x0, &(0x7f00000005c0)={[{@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, r0}}, {@discard='discard'}]}) r1 = getuid() ioprio_get$uid(0x3, r1) 03:40:18 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x40100, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x9}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) recvfrom$packet(r5, &(0x7f0000000080)=""/234, 0xea, 0x10003, &(0x7f0000000340)={0x11, 0x6, r6}, 0x14) fchown(r0, r1, r2) 03:40:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x97010000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:18 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@nfc, 0x20000080, &(0x7f00000000c0), 0x18e, &(0x7f0000000100)}, 0x0) sendmmsg(r0, &(0x7f0000002c40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x40000c4}}, {{&(0x7f0000001240)=@can, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000002840)}}], 0x2, 0x20000041) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) 03:40:18 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xcbda8214b000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xfffffdef) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6c, 0xffffffff) [ 592.940692] JFS: discard option not supported on device 03:40:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x79000000) 03:40:18 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x480, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x25) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x100ffe, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) 03:40:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x4, 0x1f) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$sock_timeval(r0, 0x1, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4102, 0x0) r3 = getpid() ptrace$poke(0x5, r3, &(0x7f0000000040), 0x3ff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x46e, 0x8}, 0x8) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 03:40:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x9, 0xffffffff) 03:40:18 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x8000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x4000a0) 03:40:18 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1000001040, 0x0) r0 = gettid() r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x4, 0x4bb1, 0x1000}, 0xc) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) creat(&(0x7f0000000140)='./file0\x00', 0x0) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 03:40:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:19 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="30303030170001d9e70000000000ddb4cb12f7270c3756386865a54a2efcf08948783d3c111a40e8d6915cc9578354e161bc2be6172cae4d03c68a8a7a6221e586d40500f0b747551417dfbb98d2f34ebc"]) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x1208000, &(0x7f0000000340)="87e4aec0657dc7e9a7ea2ee9c5abf8aa925174974aa532deec6f5eba85a3559608eecacde8942af547ab4d41df0b2093a588a81a") link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 03:40:19 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x5], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xa00, 0xffffffff) 03:40:19 executing program 0: socketpair(0x4, 0x9abc011bb5f604e9, 0x8, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x9, 0x0, 0x3, 0xffffffff, 0xab, 0x0, 0xcd, 0x80, 0xfffffffffffffffe, 0xda7c, 0x9, 0x2, 0x1}, {0x7fff, 0x3, 0x1, 0x0, 0xd7, 0x2, 0x71, 0x3, 0x47f, 0x7fff, 0x800000000000, 0xffffffff, 0x100000000}, {0xb845, 0xf00, 0x8, 0x0, 0xffffffff, 0xffff, 0x7, 0x1, 0x100000000, 0x1, 0x9, 0x401, 0x7}], 0xc53}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000000180), &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f00000000c0)="e5ec27f8d98ad8d0af74cf8630b2910a852dc2931f2db8a3da65f7d3e79b") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setattr(r1, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x7ff, 0x80, 0x7fff, 0xfffffffffffffffe, 0x7}, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = pkey_alloc(0x0, 0x1) pkey_free(r5) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000003c0)={@mcast2}, &(0x7f0000000480)=0x14) 03:40:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x229) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) read(r1, &(0x7f00000000c0)=""/115, 0x73) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) [ 593.627119] tmpfs: No value for mount option '‡ä®Àe}Çé§ê.éÅ«øª’Qt—J¥2Þìo^º…£U–îÊÍè”*õG«MAß “¥ˆ¨' 03:40:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x101003, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000200)={@host}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000240)={0xff, 0x1, 0x3, 0x81, 0x9, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="670f019900000000baf80c66b8c63e8f8866efbafc0cedb800008ee0b800088ed0f3abf26436640f01c8f30f0023f08157000500ba4200ed36de5b0a", 0x3c}], 0x1, 0x23, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1900) 03:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x400000000000000, 0xffffffff) 03:40:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:19 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x6], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x8030, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8100, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0xffffffffffffff19, 0x2, 0x3f, 0xff, 0x7, 0x9, 0x101}) memfd_create(&(0x7f0000000040)='oom_adj\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') 03:40:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x4000000000000004, 0x0, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xa54d, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000012c0)=ANY=[@ANYBLOB="66e6696c746572000000c6000000000000000000a22b22c300000000000700000004a80000800400005802e72b40e9c281c3be0000980300", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000e0000002ac1414aa02000000ffffffffe0000002e0000002ffffffffffffffff000000000000000000000000000000000000000000000000ffffffffff0000000000000000000000000000000000000000000000000000000000000000000000ff00000000ff0000000000000000000000060006ffffa45600040009627071300000000000000000000000006263736830000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020800ff7f01000000e0000002ac1414bb000000ff000000ff000000000000000000000000000000000000000000000000ffff00fffb0000000000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000ffffffff0000000000000000000000000008000307ff000200086270713000000000000000000000000073797a6b616c6c65723100000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000890000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000070c7ea30ab5c00000000000000000000aaaaaaaaaa1b00000000000000000000ffffffffffffffff00000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) r1 = memfd_create(&(0x7f0000000000)='$securityproc-\x00', 0x3) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x3) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000) [ 593.702137] tmpfs: No value for mount option '‡ä®Àe}Çé§ê.éÅ«øª’Qt—J¥2Þìo^º…£U–îÊÍè”*õG«MAß “¥ˆ¨' 03:40:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xe000000, 0xffffffff) 03:40:19 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xfcffffff00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:19 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0xfffffffffffffff2, &(0x7f0000000080)={0x0, 0x0, 0x3}, &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0)={0x2}, 0x8}) 03:40:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x400) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000240)=""/153) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0x7, {&(0x7f0000000580), r3, 0x1000000000000001}}, 0xffffffffffffff58) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 03:40:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1f0001c0) 03:40:19 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)="2df188a80ba116a8db8ba30f436c4e8dae0e32772865c0b60fb6bfc4f11c05e8970122dc649f8aff519c90197f30329b26d2680f21b038521045", 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) close(r1) lseek(r1, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) close(r0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) 03:40:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bb3ebb6e5ef2b44463a1b4a26d5c42b857252eb266e9d2c9513e4780fb300575ee65ea9aa02db43242f2074238e6621dc458c2df0d0f9ffbb8e74c2015d91dc82604644a9e47ca3aa4a4261246329c545329c57c1ad57b0c"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00'], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6800000000000000, 0xffffffff) 03:40:19 executing program 7: msgctl$IPC_STAT(0x0, 0x4, &(0x7f0000000000)=""/5) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x100) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080), 0x4) 03:40:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:19 executing program 2: r0 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="49000000c70eedac7573ef0da95d0a694ff84bd0e1233bcc7ac1dd71298381e6e4152deb688d0f2ce40eb0c9ca09a47a9736dc8483e35f018b64cf6ba0d3000000000000000000000000000000"], &(0x7f0000000080)=0x51) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x1000, 0x9, 0x8001, 0x2, 0x3f}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)=0x0) ptrace(0x4208, r3) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f0000000000)) close(r4) r5 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) getsockname(r5, &(0x7f000000acc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f000000ad40)=0x80) r7 = socket(0xe, 0x3, 0x8) r8 = gettid() ptrace$setopts(0x4200, r8, 0x7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r6, &(0x7f00000003c0)={r9, r10}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r11, 0x422, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbf6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa758}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) sendto$llc(r5, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) 03:40:19 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xffffff7f], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x48000000, 0xffffffff) 03:40:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000240)='./bus\x00', 0x2, 0x4, &(0x7f0000000640)=[{&(0x7f00000002c0)="360b032a64f9d7a09a1ba0f6750cf912ce426b8a08a27802566ca04ff1d742aefc6d1177f4de827402b37dc8b81bee0fc333c762dcda513c40286d072cbf579c881681d6e9d85dde6406d20d5cb440b633bef1a9fe1641770bf2f3bbe4bc893112eda8aeb561d28630f715b5331e3a2f8cd1939d776c74f5dc46b62523f7502fdddd11967cb8ce66ae195e80e06746f39d69fa2fdd3ffabb6314c7d4ae8a6a3cc976678c4acae815b0a3f8d175d67ff955e1d571bea54293f1616baf2fb9bfdc518e4b4c7c8dd254b088371a6287a71d0454c0538ca231e1319d26047ed792f0c9a400cb896884f2c75ab191856f6abcde7c63a524", 0xf5, 0x7aa}, {&(0x7f00000003c0)="968bf20dd6ccf27eee62f70a92ee685d72241770894b3e4d825efa154ca6b0f039f1355cfd68ed679cf65452738fad1cf42a45cec8af016e55450e0bf3c504943e51311651e3f79cadf203d05c8c77f3aa8748e50fe8c8900b5aa0c3460ae9c15d0dc7faaa708faac1e170d27c3096519ac427d375e5de09ab715ec2ddf7cc6e38b4b852d1a122582d5bec2c", 0x8c, 0x78a}, {&(0x7f0000000480)="195df1eea9ba028c2b220b89098802ce6568a0f5c9d88ecb73b6a9b4e0debba2062981702bdebf90b9715164df0348e69d7da9806a6b7bbf9cc07ef21d96953752eba0204754ba8edc9a90dc2e6a0b75ea066214cb8556db1d5deba6855d7fe50198ed842b145e9c4a88cd7eea8d1b161150da4131450d55c9f3b3e7051dd64e7b7b7eeef1a712299704cf5670e5f9d1f7304945c3bb92cb0e031015e7c735f25c053f453a4c741c2e84c00fbaa3d9dd010b04a3", 0xb4, 0x7}, {&(0x7f0000000540)="1492f42d357ed54eaebc7d00c8eca072f0e9e1934b1074e1a030a67641babc16e3d42b503285b31208ad174d10216d07d8ff9632394a6ac4607dad24dc8b9513bb7efbe880b5ae7c74956e8359330e0c0ff240dee09e9ef2bbd053af8c10e9df62c2bdc879abcd7caa1700bccb49b03040dac6ce86695867fb08a023f374c4d8ac80f0b097e55e0af29f5db021a1e29411aecffaa72bb40ab907ce61b33a6f44e1847a98643b5329011d77e04d2b89a7c72870fbc50b2fcc800335ce0c30122008c6d4cb638cd5b6926d3393b0", 0xcd, 0x4}], 0x0, &(0x7f00000006c0)={[{@background_gc_on='background_gc=on'}, {@flush_merge='flush_merge'}, {@background_gc_on='background_gc=on'}, {@inline_xattr='inline_xattr'}]}) syz_open_pts(r0, 0x200) fchmodat(r2, &(0x7f0000000100)='./bus\x00', 0x41) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000700)={0x0, 0x0, 0x1000}) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c70726976706f72742c00864d07212ab3d5719aa4253ef7596dcff26db54101cc641ba621964298f7470f80d0616d3d9aadabb59619787396e3da6b5b6e92e441a4af8b7003451a1f04"]) 03:40:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="669e"], 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x444800) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x8000, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:40:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x900) 03:40:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x2000, 0xffffffff) [ 594.625343] 9pnet: p9_fd_create_tcp (11769): problem connecting socket to 127.0.0.1 03:40:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x6100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x3, 0x2}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) [ 594.675899] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 594.706596] 9pnet: p9_fd_create_tcp (11782): problem connecting socket to 127.0.0.1 03:40:20 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x1000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:20 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 03:40:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6, 0xffffffff) 03:40:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7b4, 0x4000) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @broadcast, @loopback}, &(0x7f0000000040)=0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07041dfffdb46fa2834020200a00090001c5a351f7680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed03cc0", 0x4c}], 0x1}, 0x0) 03:40:20 executing program 2: init_module(&(0x7f00000000c0)='em0\x00', 0x4, &(0x7f0000000100)="656d46d466a3d5f14d127e87ebbd16c0193000") 03:40:20 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xfcffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:20 executing program 7: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000673000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}, 0x1c) getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts={0xff, 0x18, [], [@generic={0x0, 0x64, "fae84cd919a68cb918a18f2a510daf123963ac4a2966993edfe6ab01b6963a26eec9672efe157017f597faab3c708ab873ea3b773d8b88d238fcdf01ca04029a436c4861126d666200eb413310613943823808b7384e8c89926e58384cd80d97afc189a6"}, @generic={0x3, 0x5d, "7aceea0c7c66caa4f31fcaf505abc0e2335ca8062b9ecb35b03cace2f45fc6a16484e7ca1db1000a7f37fcd9af534d7e0374d026cecabb0e6b2996275908bbc71cfbda57663b9053c0ae2db1cd3dfff3358c1b5f5f70ca996949b4476c"}]}, 0xd0) connect$inet(r0, &(0x7f00009a0000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c2d000), 0x0) 03:40:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0000100) 03:40:20 executing program 2: r0 = inotify_init1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000b0e000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) dup2(r4, r3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x14) ptrace(0x4208, r5) 03:40:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x600000000000000, 0xffffffff) [ 595.153666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:40:20 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xf0ffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x28402) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x8001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0xc7}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 595.212745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:40:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000180)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x2, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000200)={0x4, 0x0, [{0x0, 0x0, 0x3e6}, {0x4}, {0x81, 0x0, 0x6}, {0x1f, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x12, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000000)=0x84) 03:40:20 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x365, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfcca) 03:40:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x68, 0xffffffff) 03:40:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000002c0)="0a5cc80700315f85714070") r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000000)=0x54d, 0x4) sendto$unix(r2, &(0x7f0000000080)="56cac3ed19a59aab21e1529cbe08bf5c67ab41318c2e1e050fbf84a15bb9dba1c9721c1ba4f4632343a0995e25f9137a4d01a764f85ed1442f7fe91a6d23adeca365d0d5f4afd0ac21fcb48d2216cdf6c79c0effa54d59834a3ca4c3b7bf6aef34d0f3cca83007520d9025b55a4986dd30ff7333b9a3849862cf143b1c4b74a29fb48a0e5b1a98d3a9e3d922775afa05c2b2cd575477887989409b866e4c73d26b0e4bea8557b0698b548203350b20491bd4ddb8afcdcd3dedd2f331e1440124372e2e327e15bfbc6854bc2648c1eafd48ee226a599003", 0xd7, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$unix(r2, &(0x7f0000000540)="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", 0x1dd, 0x4000, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 03:40:21 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) fchmod(r0, 0x10) pread64(r0, &(0x7f00000002c0), 0xfffffffffffffc62, 0x0) 03:40:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x9], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7501000000000000) 03:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x3) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) accept$inet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="f10fd95c97ad85c83c190e413ff7427c"], 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x80001, 0x0, [0xfff, 0x1, 0xab, 0xd38, 0xffffffffffffff01, 0x2, 0x5, 0xffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x2000000000000000, 0xffffffff) 03:40:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002284, &(0x7f0000000000)) 03:40:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8e09]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) bind$unix(r0, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") close(r0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x20) 03:40:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x800000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:21 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x1) lgetxattr(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000340)=""/233, 0xe9) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc20700145f8f764070") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000050000000000000e00000004000000f80400004001000000000000a802000000000000000000002804000028040000280400002804000028040000040000003a0693003fc7e73d009d99bc66f2a31f2680e123d3a6d192ace60d5ce41e2c38c045e81d84b921364ec86db8f862a4958c", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000004346af91cf0182844a48113224058c000000000000000000000000000000000000000000000000000000000000000000000000000000230000"], @ANYBLOB="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"], 0x28) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000440)=""/148, 0x8}) mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 595.841393] *** Guest State *** [ 595.844816] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 595.853772] CR4: actual=0x00000000000026c0, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 595.863048] CR3 = 0x00000000fef00000 [ 595.866837] RSP = 0xffff88019418f350 RIP = 0xffffffff811f3def [ 595.872861] RFLAGS=0x00010042 DR7 = 0x0000000000000400 [ 595.878920] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 595.885773] CS: sel=0x0010, attr=0x0a09b, limit=0xffffffff, base=0x0000000000000000 [ 595.893828] DS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 595.902168] SS: sel=0x0018, attr=0x0c093, limit=0xffffffff, base=0x0000000000000000 [ 595.910242] ES: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 595.918290] FS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x00007f03d49d1700 [ 595.926649] GS: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0xffff8801db000000 03:40:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xc00000000000000, 0xffffffff) [ 595.934687] GDTR: limit=0x0000007f, base=0xfffffe0000001000 [ 595.942753] LDTR: sel=0x0000, attr=0x1c000, limit=0xffffffff, base=0x0000000000000000 [ 595.951276] IDTR: limit=0x0000ffff, base=0xfffffe0000000000 [ 595.959829] TR: sel=0x0040, attr=0x0008b, limit=0x00000067, base=0xfffffe0000003000 [ 595.967858] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 595.974353] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 595.981865] Interruptibility = 00000000 ActivityState = 00000000 [ 595.988175] *** Host State *** 03:40:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 595.991946] RIP = 0xffffffff811f3df4 RSP = 0xffff8801b68d7350 [ 595.998024] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 596.004545] FSBase=00007f03d498f700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 596.012418] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 596.018396] CR0=0000000080050033 CR3=00000001b104d000 CR4=00000000001426e0 [ 596.025981] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 596.034154] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 596.040320] *** Control State *** [ 596.044602] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 596.053398] EntryControls=0000d1ff ExitControls=0023efff [ 596.059066] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 596.066138] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 596.072864] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 596.079508] reason=80000021 qualification=0000000000000000 [ 596.086069] IDTVectoring: info=00000000 errcode=00000000 [ 596.092007] TSC Offset = 0xfffffebe9b13afed [ 596.096423] EPT pointer = 0x00000001b662901e 03:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x410501) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000140)=0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:21 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="f90f23a90d24cdaabeaaaaaa00787773276a5a7600000000000000004896"], &(0x7f00003b5000)={0x1, 0x3, [0x9df, 0x10000000, 0x0, 0xfffffffffffffffd]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x5, 0x805, 0x2) r2 = socket$inet6(0xa, 0xf, 0xfffffffffffffffd) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000800), &(0x7f0000000840)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@ipv4={[], [], @rand_addr}, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={@empty, 0x63, r3}) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x4) write(r1, &(0x7f0000000440)="f91313a0936f0b763c12fd39826a3c961d68284b77b259439b7b4965c4e10ba36ace8230802a5c5ccdd2c36e773382f87902bc6aedd7c7a1b8530b149db7c6351fe81f12db550c115522d311a7fa0c1bb3a16c1f828e5c2f42aa30ad475549e41142cb3f16ac0ee9420ae3906613e632006392a21b4c31c56ce7472c7f0ffc65015a6bc3f7da9d88ae5d2775ac4dbfb3461a6429b28246cdf3096e3d906672acf65f4cd8b60a3af47b88df0b14806453e55b55539ab56c0bc2335bcd38fec8d9e297fc5e25497fe026118a1184334f2cbefef0c4f2e2e88bb8de2fe4258aa899d656ae5f5b8b94a0450d1e062f13b20c2dfb07", 0xf3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000200)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) socketpair(0x3, 0x2, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', r5}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000240)={r8, 0x1, 0x6, @local}, 0xffffffffffffffc4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) shutdown(r4, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) socketpair$inet6(0xa, 0x7, 0x3, &(0x7f0000000640)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0x50, &(0x7f00000006c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1de, &(0x7f0000000880)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251}, 0x48) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x1326a20}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000005c0)={r10, 0x4}, &(0x7f0000000600)=0x8) r11 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a, 0x1}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000680)={0xffffffffffffffff}) getsockopt$inet_dccp_int(r12, 0x21, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) 03:40:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xb00000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 596.451745] bond0: Releasing backup interface bond_slave_0 03:40:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000003, &(0x7f0000000280)=0x2fe, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x2]}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @pic={0x1, 0x5, 0xffffffffffff88db, 0x7ff, 0x101, 0x7a, 0x1, 0x1, 0xffffffffffff0000, 0x6, 0x100000001, 0xffffffffffffff9a, 0x1, 0xfd34, 0x2, 0xff}}) shutdown(r1, 0x1) 03:40:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x400101c000000000) 03:40:22 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x200400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xffffff2c, &(0x7f0000001800)=""/130, 0x1, 0x2}}, 0xffffffce) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f00000019c0)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000500), &(0x7f0000000440)) dup2(r2, r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 03:40:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xffffffff00000000, 0xffffffff) 03:40:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x600], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:22 executing program 2: getdents(0xffffffffffffffff, &(0x7f0000000100)=""/8, 0x18) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/127, 0x7f) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) bind(r0, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x2, 0x2, {0xa, 0x4e20, 0x6, @loopback, 0x3ff}}}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x7beb, 0x4) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000200)=ANY=[@ANYBLOB="010000143d0ead13568ad3f739f434444f944c6963535a4f105dc15d05c7bfb85985da1bc8c8895d6898900cb71818df843d54295cf25c6e77aaca1ce1063d"]) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000007c0)=0xfdc0, 0x4) io_setup(0x101, &(0x7f0000000800)=0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x9, 0x22000) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2080, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x4, 0x200003) r9 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14, 0x80800) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x4000) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/snapshot\x00', 0x420000, 0x0) r13 = syz_open_dev$sndtimer(&(0x7f0000000c80)='/dev/snd/timer\x00', 0x0, 0x10000) r14 = eventfd2(0x1f, 0x80001) io_submit(r2, 0x6, &(0x7f0000000dc0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f00000002c0)="21f71cd05f79d0c490d935d954076a5f28fdcc8d39c2f88b784f4c0b214abd4722ce3747009015e1bb075dda05c5b10e194f89c443492a7767cc279354cf800af60880498666467a793c2db8832028595d6af2c1b1f20a0684b64d1a29244dd270d675ce23cc1ff8a11d0113cc843eb05f7c33dcd1f7fc41a00e38404b90a7c8baee35ba8bbf02", 0x87, 0x8, 0x0, 0x1, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r5, &(0x7f0000000440)="2a27a70b3bd0fc", 0x7, 0x3, 0x0, 0x1, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, r7, &(0x7f0000000500)="af4cc2308936b80629f5906aef1623dab2e505e4dbc7e833ec5f05cfbfa25c3d15a75358a37a4599e5c7746a7f42135e56f6f8b0a228711d5beb30a8773a0a653fd8af45547cdeafe989a3fadcf78040c051fcd92d526c23096d3342e4593300248e9fb3cbe3711e7c74411e0abfb3139f42c8a2f709c82f79af69df6c41eca4fd519ea0", 0x84, 0x3, 0x0, 0x0, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x7, r9, &(0x7f00000006c0)="1426ed25bfe4964e579438189b6e306f6bf17e7584d2bd1ef70ea4d1565da0d5ebe392ebb68360ca7287292ea2f19687a0d5fdd5231920723157b5554dab439a9d874371ed5f639c2377bc3ed9d63aef1d3161109a8b031334a111a0f72e3ac3001be7a7b3a306e5f918d695", 0x6c, 0x0, 0x0, 0x1, r10}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x6, 0x3, r11, &(0x7f0000000b40)="febd5159665ee2543e8ce99365014ccce3267910b67c6ed0db51531d9ab9d395cd15614b9de72a1800e500d82939a3fd1a217e52590900df2535c86157ecd4caa9acc5f07cd2057e1381d8134453c127289ab89c3929602f399a40e429545f4a11007c1d03f1835550361ba60b62e68d631add4205bfa8b5ff2ad94d613a76efa7cc8fadf60bf068e419a07a29c0ce8c0194fe83079e7ad2035d0b74e992c840e435166faac83aeb45eb10d86b46ed5861b5d7e11b1fb4e84e23e8620a", 0xbd, 0x8, 0x0, 0x1, r12}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x7, 0x3ff, r13, &(0x7f0000000cc0)="d957037b75e8b5ce38ebd7b1ca4ae726863b0a300abdbb4d4a1787ee460fe9b4026f06f4a03a27b79830aecb23843a98b1a3563e4126cb872aecee6325a3a90af8cecd685af6b469c119c8871afbe7f3230b5afc3f109b365cd03081a174ad6259fa2e98ae86de8e0fbe6c5b33e3540a69fdc1caa92572a11dee0b5528adf4274c28574f050cd24eb5", 0x89, 0x3, 0x0, 0x1, r14}]) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/76, 0x4c, 0x5a, &(0x7f00000001c0)={0x77359400}) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000000240)='eql\x00') 03:40:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x4800000000000000, 0xffffffff) 03:40:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xffffff7f00000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb43bb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x200000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) r1 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60) shutdown(r1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000240)={'yam0\x00', 0x2}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) 03:40:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4000000000000000) 03:40:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8e09000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xa00], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x1000000, 0xffffffff) 03:40:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') close(r2) 03:40:22 executing program 2: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4400, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x122, 0x29, 0x1, {0xf4, [{{0xc, 0x4, 0x1}, 0x9, 0xffffffffffffffc1, 0x7, './file1'}, {{0x2}, 0x9, 0x9, 0x7, './file0'}, {{0x14, 0x3, 0x7}, 0x60, 0xa78, 0x7, './file0'}, {{0xa1, 0x3, 0x8}, 0x7, 0x9, 0x7, './file0'}, {{0x40, 0x4, 0x6}, 0x8000, 0xffff, 0x7, './file0'}, {{0x49, 0x1, 0x80000000}, 0x3f, 0x78, 0x7, './file1'}, {{0x3, 0x0, 0x4}, 0x9, 0x1, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x3, 0x2, 0x7, './file0'}, {{0x0, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}]}}, 0x122) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00J']) 03:40:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x880) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000006c0)=0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000cc0)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x1}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000700)=0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000c80)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)=[{&(0x7f00000013c0)={0x1430, 0x2f, 0x3c08f322ef0e2c19, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x101c, 0x71, [@generic="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", @typed={0x8, 0x8a, @pid=r4}, @typed={0x8, 0x18, @u32=0x9222}, @typed={0x8, 0x68, @uid=r5}]}, @nested={0x1e8, 0x5a, [@generic="7a749d3628cfc94c7db7e87fd326804e1d32f902d3b489048badecf2eb23e0797c37fbeb3895fa5a37525b250f1c37d8a8f8444cafac104706d7c61db6d1b64f81e6f0c03c9520fab71f14ee0ce27fe378e5b5270b1f3aeb99a5f80ffb92f4b89be5f095f217c5e12d3670ad5a51a0e1047c9bb00661f5ecfd657d607005631d58dfaf5fea351b96abfdafc7e1bd794f65c858e0bcb4fa5d7420e79082875112a9df5f79c6633581fdca0c5ba0399decb4bb15973d46929535f0fb558d3f17812ae4293750af07bc09c8cb36926b5ae6ce3b2a49462f2f93092e0a910cd18f7630b9d22a65422461a297c0a61dd6d5cc5695", @generic="28414d5aeb4ce3c4480caa4e227d04bee4105fbc55d3480ea5bdeb884c617495dd1ed74f1abad1351b6c517b16ffe26b229f06ca947d05acc2429891b8ca2d25fe608824d6c753f720298246080a5228fc209c09125f577068a5ee614352974706a3fd6ec7d85bf71abbe9ac29e61adb886a5c36eec08d2f0286751f6196de1e36d1052e96122a4d7a09a4717b6a24fe4fb53c4bd5506ee965568d131ad73bfee7275ff1c43eb850f7ee3ec11aa3fe6d7a8775869469253484a50bdbf464a2db5c5b52456f43c671957227cf4460a3b05d9f7d7191855164edda9598a8744158868990366fdd737caec3c641297dd0"]}, @nested={0x21c, 0x5e, [@generic="6e1e4209e0f448302425a1e51a190f576216f2e7419a1862b8d3263828d4551f95609a41afd2c7e60ae2c01c0236f317af070013564b21d8f2d59bf4d23205c6b410b103115d9c3a7333dc2f9de19968bb68ed6c7b7d0898c24a69438311f67451f717eb405a2067a292e7f75b1f63fe797b67105321b45747ac827768d91ca5", @generic="648df60923e0abb00f7b02ad1a4dcf74199108588abb21468553b29db5c71ad00e96bb1412f2073f9fb5d77404db13d11ee2de7f05b24a9ad0db66247641ae1ea865211b7fa464b7293c41f0cc8a57b9a03d8888b61c9d17127776a46bf46605a5499de3eef2f557c80b327448085f76731c348de637be31f6fe298f9a093984f0caed687671f4bdcf050d7984fa3581788addbf548bc55e3ed1ced424ee9f5c857c778b14b745133db953b87f56e510a1feb99a921d9c4e1a02d0711e60f5372fa660792b6affa62a6b03ebd7f11a", @typed={0x8, 0x51, @uid=r6}, @typed={0x8, 0x17, @uid=r7}, @generic="f3afb037a5e3e36cc5730e5885e8a23b6e287dc7eec9e3f01b8897db6e6b578a87298d6ef3a70dba784773ced4a1b6df1fdeb242700799bba708ef16f0aba0ce74696370e48e161ac69b221a741b50a65761aa6556ba87900a911d3788049c10db0dd3673d9e5ca287aba88e8aa66c1f9ae06a1721b7e8f10e8ff3b6bae29472345ddb5bad551e4d4c8306469dd20ef9cc9f87b61f34bf43329876b40c655181d29ca67862dbe102dd26d591dccad0", @typed={0x8, 0x10, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}]}, 0x1430}, {&(0x7f0000002800)={0x24d4, 0x29, 0xfc403fc06e87c4bf, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x76, @pid=r8}, @nested={0x11cc, 0x8f, [@typed={0xcc, 0x1a, @binary="d513518bfa11e4b9d66fcd39dbd6fb1bcc7321afd0097b2e43c4729a20cfaaa42b3a9aeccc0792fdba05bc0bd4417676e035e04952aa4fa16a47f5c581fe0e0d9e20da574acb077006515acb04f114944102336d95d0a8ee04e322cd30d62dbcc36082c47e0ebff187bde2e2404c76f0571fc21f92fef6dbbc27ef6ad4549eb92860024c75f7a7653c9c7b1084c92228605425297c5113ac173a589185583585e0b61f1a2d81d0253753cfb5a3ccad8c35df76ce655387699f3210d247090c079ccd444699e6ddfb"}, @generic="3e20479a048c372288cebf1c60363690493b70df032873462d9ee0acb3e01fb8f7183e147e8f77adae118a016edee0c047f3a02f3a7851920f4a55e7ef673be0790f02c248aee5b5504495a40156248ad00a4df55c1104a2c8104935e62deaeedd9d0ca69cbe7f11ff9fc164738fc5b8b8004b1f902271649a1fbcfecb29febee398b472871d7a482555f9beb6213df63eaf70b688a39a881c10d13ed16bccd1ebb120f1b5549fcfee1c0995e87ef5b18af0fbc4be6325f364d6711ed48dfe97f7048ffba6a93f50adec436b11c8ac810a269f90be4b7ac8407a23a974567c9012191663", @generic="3f24b63d5cddf89e916e1146535835c36a1c3b84ee67d4b7", @generic="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"]}, @nested={0x11b4, 0x19, [@generic="07d64c3b41de87194fb557f8e4cb49ef9dbab975beeac437326edf041699c1b1f1d3242680408600b4d6d6339b3186059cb98899125a378f0f5107a808a549090daf93bcfcda9f292669ed8516d908a202526c1225fbd3f4e843b12f4f69864de48a9473c464aa7352a463993122af710d472eb52280c34a4141f51a617830ef8402abb9d02a5ef96b2090bd1b04277de5bdc1a4edb66e4be46eb6b27c885fe6dff947226e27b8da6deb2a41fd7bf6a446a854c8cd3975ea8b68094af18f92162b992a50d1ac60ae376f5a08a717c0e0c11ae2a0950b3bcec5abeac47eeff1c38078cca8f762e0937b7a19d69d028d133d27dcf482e51c69b2", @generic="a973d43dd8936f8971e8371917a82ce023701f6f3207cb4cdaefbaa9ae514880dc31461f259bb03970c50969377faa69a3e36f4346d508681a6e32fc1b0ea65973f529f3c59051020d02eff2b473", @generic="10bae868c32a18a59df7b6f0b9244a528e223e7f62bb105fc3c10359af85cd5a0e3a", @typed={0x8, 0x5e, @uid=r9}, @typed={0x20, 0x6f, @binary="062d1d44fade33e9b4c4273d4a1839825f2d7dfa0d8dd8104e"}, @generic="38322acc5340b5eaaaf5cd569eb0c0a5483b1c30b0c57fb19645453705ae9313c90d137fcc1c3beb6ea8208a509c4ddbd5613746a21d3cc75c81f2c6cf773d5b8fb7b5752aee6f882012aa8c52ee6b1e324effbf9dc5806881b3b8a22dff626d5b3f27f6a7f1ed792c7fdd9e17a3a7c09b269cf9cbdb170490ec3be25967a884c5731413984825b5c9ccb7f729b02567178fe7b681ebaff736f69f9be0e91886e4efdf7f5d66094e09c1bfb5ff6bf62cb6466c47b208159c7dbff938d87afa24faf37138b49c671cbf2bdac6f6e0e15f087ee86319ac0b059b739164c2343ae5800fd47587e192dcbe6b93f5181e332c943a94c39e1d0726e6fd30a0fcdac0fa31335beab2ae970348f2176d8312afaa288bd68e668462645bb83cfb0cc03083f08a7d114b113eb0a01a47f0f0d6d8f10d352ea43de72162695466e22e3d53bb27b9d0eef91ea59cae3b7a3ae93e9ef536fca2e0b62869652c66baff551f28e009bdb609098f54127fad4ce3f2ffabc21c92ae81ff4e09ad59ee99c03fadafe38f60d187bd4acb08c81065088b50ca881841ee2dea364bb2c907f393ebab9541d0ca731d052b5e84350e890f2552d24f9ffb970c5f80d729bd3cc98a02da5bb0d56497b5c88e3a5bbba25aa971493f048d31731ba25780d6600601e32e104f135b248d8fbd8da135f86004e366d03629d7348353dda9f14cc5272fbd0dbebb2ae385f3b90df1ab2964665fecb05c9d81fe8ae2e1b80dbdd20be9c2770e5c1a78bcb671e768e41a393d37e15edab9b030075e6856ffdfc69d93017768497d41ec1de24e34d15a2b1b419d3e1aa7567b9dd3603c301b7619b329874bc985e8f3d72861c8f6206b12145bf9bc58b015c5711c25ee67ce8940eb57c4e45291861275d02f127a9e3a3a78567a78ea5c8c888445c6a774a4fa12278abad7357fc8ac593fcdb6181b59be6bc57494458257cac88fcf8a11e28694e037eeb1b60e87bf2d8fc7f23efe4df903a89bdae12eaa9af6d6725d6390df93ca48f685b31119cd0478a1450b64c70d4aa217fe2b93547867a343db0e7a6c84d72b98fce4cc7e561b19b7b4e1bae7f7fb0e84dd2f2903eb71714fcca6c2238d28e95d9f3766ab8097756fc3977e20297cfee6afb857efbb23f7a4198a9374eab5adcf9ba492149e3140dbd4f03892bc850826f78f877ca9d626b1a5ed52d8811218723d3af56750acd02f4beedeb37a61a641f4cfdc34931c62fef02f7a82d06ecd97f5c919e199b5fb993739790d39e0069fb5d4286a7720aaffd35062bf9ca4ccbc5ca728af47af3e15b4a1934a96c06305f5c1731ebee356e2ad6c4085beead17f73ea64aa37d38546d993a03798138d83d1a4b5ba4adcc03d48f18d07fb53f2425b1a8edd8d2a57a8f91bae5be85bdbaefe1004dca2e54566ce2f41af7ad65196abead7299648311660e039d8f0bae6b4a722379fcef616b1c314619110b537d80fdf0985b4c0d609049434fc7e49cb43071180a6b00ec9e88b66effef68a83ffc9dec9a60317478433d61735a9e316b2b20174c93d7665c42fb2992adf81ac38e4044e42a78c5b1a6bb3defd02e578785eee9792e94e37b31004fb9c85854b68b9032cf7ad4fd2d3e6581394bc0da5aff6cf82c912a01464f036193faacde27d08fe516a569402f934a5ab8ddbde410ad704fea34d1b107a45d017acfec047afce7aaa66f5e6451fd8ced8539a1ae48ed824ff291c53f973aea71de022f0d772d6632ac82f1b0cd3b8e72bc87f51ce6a2cb8a61761d3f0ff1c9e16c0837216b2e37ed8b036e2b3fb7eea89ff1a404ae5db2d41a1f12618bb284366cdb828a8986ab6aaf6cc5dbd09f0c2615b95b95112b93d89a47c8a33336d9574c8c6c74050f7182b4eaa28af0ef3f02dfc4899a1812b5d32410da65b2292ad439c0dd47b12967f7fcbe4562d19a5ea999125ed068a670e0839b419dc28c02dd66c26eb4217b0c599182a5ebefa4a8e242519846bfb2110f2e71aa4f4eb5e7accfe4a69dd415388e421fa537ce95428c8d5c5b3f4da0d8f7bfb407d46a8e6867d2c9ff3507e44cc6b4e501d4a5b692483920ea4023c7eaaaf3d8258e5354e5350a8c167b1d957f10599df17ed31ad27b556c1288f8c47fecda2e8da1ae0231aa6c86c4b0e2b125568edc69fe8a5a0afe8ac80e6770b74569c97948dc46168bf7048eaecbfbed040d87875776df14fc87bffe046ac7a3c2071f5d38c9b06fa7dc95daf88fbad2c481a17ced3332c4f1bf15c23a1753f60fcf5cd34f08e7e3e359fa8d39a2f4d6b0287c98a3fbdbb03cc863457f3892335cd1e4ec2fb07f12d067baa465dc615697094bcfa8a23e0bcf52a55b5f12f4a28316b4a26f4464a603a8d1aaf9c8435daeab7f5ff622827c276af76e1601b8f42c85222976017ac9bed52a75671ebd9df5bd123889c97b25cc4848011186caf6cdb5f559d87d15a5f65c109175a0cbb3faba15c8d542ccc8d62e80cb66717a8a9dabb1739f37bdd68c6675f23a4a6978b99682437ebd34e85cfa881a6ad55e52f10f9b508d71a2e76b85ce66dc79545861ebc927dd9ac9d2f40130a62cf7a98e2cf6af4cc6feb1b996da99eefb8b882dd66e9a110df6053ed254649af7df32865d35f7bebbfd350ca65db74ce3a5458bd39ad2bafe7ec0d69c734bae81d800a7aaca378efa2fbe5ff6a9a3f5cff8bf4dadfc4eaab7f04f8b38f62116398708052f31410472dbe907630bdf01cf5422763537f1672d5023a3a8e36d6b3511eaf920d2cc59c5b85bbd50613bd4b5c73b20ec2933779c57abc96357e78955cfb53e7e795853d64c457df3230aa6b542f1c7406f38ab35c821ce9848bda8e83562ecc3193bc0081408b465a60327693a86a308efbb66bb6dccf06319b2c12177eb3260694a9a17d94b9d503fb4875f62c9ab29b5f49d352338353fa4a6b8b700314f0355b3feb630efbf080e9d57213a9d28ae868490cbaa098424ec36bc77f44ff80ab08d17b2bbf836e93eeb295bea8057dcec0261bd36473ffb3125c5b4646c8ae59d041b9744954cdd90f1fa6a8dc504a532519f05c944aae7a697b86087ac8154bd497774686fe757ded11995e459cc86d0be3e47a5a0dab678de1929134a2235820b3060154416fda370970e29f89b119d6b605591689885c3a6ab0d480a8802d10563281b6a8c312dfc5d55c7265c47ba38f106045814d0a87e59c9a9f584ee0501a7efaa6e356779e3b7712b830198427921f29a80301f6d142929123ea3383b19317826278bd58d8f29dfef05e0ef82a1c463930f07e59830d60e1a6987612f0fdd0a5ad92e9140361c6972b43c09292e89417309c5ed88d9f3c89bb53ac4500a23c8797085fa9aee70f6d16cf98e9d03fbd4f7a445216159460eba4d8167784c9fe3502da2b5c998024f18bcce66bec4e1a65117895e0e371ef2141be1fb547f288db782eb7571859333f8a582efeece577d89a7324bcc79d8f8c86aa6f28e9f6a2b7ca247387db5b1be7e9f1dcd084d09bf20fbd08a3942027f0ed19365592c559003f16f3239c966a3cc95a884518bcd636796a382624435d45dcc559d98cebbdcef0bbb20bfaa4dbdec202accef7c3f08134e0718c4d528d95c14b3d454ac3eda5e57e0a14b31c9e054432adc7ba2a58913ff9ad3cd06e4f9952d845a47e67800b911023af03ef6290fe1a9f6a9da45952c1971675ee91e41cc6f874534e926ad5a377f6be0b0332e4f4ece1a8fc6b5919579e39fbd6c1ff8e203dd62d9372bd51084f484e5e8a8b8c85567375c0581c31b955d475c824f028057c0242abd7b2296102f97eb5568598f3cba688fe54ac2874ba7d7bc2dfd8783f0b0336d06811365b0807136f5c5b38920479304f04ca072acad786e336a162b0984bac123d44e447dc9718c33bc90340386d5c6e8322ee4bed905d9e229fe404dea55cdd90025c35efe82537bda1a2e2a53264bc706617dc9c223fec8d350f81e55acc82fdc444c2a3baa996be352c1f736513fc4f1c042e6dda447e64f11eadc55fbe1decac0f39020b8d01a6cbc2ff1654e9338ec7c58cde1aab949f8a01e84dfbf0841b9eff36170fb5b065a49d4cdf7d9be56dbc12d9a46dc7009d9555cf2770933b13edbb9115f612ee74c0f0ec2f35014ad9abed4287a8cb5cbf6c3125fc69637291fdcac4a26ad8d78ebc1c6bc50e942b40efe2c5bfdb861df2df41eba011a62b3adb4431d3642b63d24cef48d8f4d4768db78b7bae1e1da7cf47ff10a87bfdfa4d39cce25627710608272d2f970437fb2ca3565ddcbd7a8ab25c0ac260edb54ff75e9a1c0344a9b7d261293c33dc924254689dd05aabafc2c74a284d52cd1b5b5f27303c5023fe9b08751f015db6df9d1df0d302cb474fcabeae224656c8f7d956505c1b229076dbe8a1ba79350a777af323267a71282fd05feba78758efe0d4f15cb8813fe9154f707e4c03941bf2b3749cd3e0a8a45d073efb65e88a25c75ed312a191e3b921e49fa2d9887cee2abe94a42cb53e51c7813d0d12c932d3b368cae43cfd6536acbabe4f6b4cc5660608cce4be62db18596abbab8314df195d2795159259bc7ee68950d6d32ecd480d12845333e26bce3aed63606d2c1f05884633dfc0dbc3fd7da8335ccd56841e3c55167ef222b7cbf096f7302da931d9b00fad560458565b73d1104b50d668e9eb09fc20d255997e06898f4ba134406aacfa538bc4a5d86d1a0c1e00dd2dc7821d1f256651fb14d607353d6a25b84c0ac81ce20238b099e30b8a93c1ef5ab3b2377bfc449b49ac802f997acda6981e92e7077c4f5815639760ed7202cd4cb9bcac513a093954a47fd6a28480ff315e619df077b95f779b513b1b3c6a1ad84d9e21177bd8410f6b273786d5be509ee73a0b176aa3de2fc0cc526d4c000d281e1b07423090711b1810cb4c44c038b848b5eb22a6cb1ad67190c9bf0e59f862917bffcae3a8ee36c7847f831fa6a6fb9e608320ff40e548d97ebcaead534d9c62204f61f2212147848e593c146582c9bfe891cd53e042958d90a27e53139bf3b8c605f0fe901bc433dc7865b05136f0e70f1426e54152a6b9c4e2d8d57f94792914e03ab1df0672c4f515ea531d1186a9c47c6a59f249a72386dd0f5d6b9abcbc8406f5c0385f146e146ebee69e83504868022fd996609e8e553702fba40ada75b0d53c701a20b2c1125a28389a501f1ad5180b786b468978a21bde17a4815de73dffbbe14bbc2abeea1bf9ca5fb170a145787767d7f4639fe20320288f3786a95fb4fe3b901e5057f09cb258f4876518fef0f89fe912b1052d5f3bca91c4cdd43a6860bf7aacc27ace9807ba7441828859dad2dd8539d2f0e9681e26f92e22e9c91e18c42cf5249aa000fabcbf1c7f6f16891a452f1f867e3049178b80b24730c6f05db111431dade6fb5e2ad6277b0c15ee9a0591e9d8421a66c93c84800438f421997a1824bd74f4b1453943abb37eb15b141971bac970419e4847207395a4e51a93e94b150073131dd43f8b15cc966c94b44bc591b670e1e57e093774ec393471fe4facebf91d94dec74d9cd94a4422aa29c734bff820dc1e782815c817a238f43d72ca675a607fd858493d5cce68b05ae1bd19fc550eca74afbab9ba6423d9c074bb0321a0e4cf7c7deecf2856199167314e94a681e7b8dd0eb426414122c4502b02d83db630dbd0e4bbcac3232e712ae01a1ef14713b5e9d572d54d8f21a97156ab1f94a4fa276f3ddd7798165df5e189bba35bb6f0ed0d4cfac9e83b9b7758baabb74a", @typed={0xc, 0x1e, @u64=0x3}, @typed={0x8, 0xa, @ipv4=@loopback}, @typed={0x8, 0x6c, @str='@\x00'}]}, @generic="d95f61fd3c30a35f9887df0ed4ce134d353ab93f58c97eb2aec9ea337d36b36d74", @typed={0x8, 0x3d, @uid=r10}, @generic="a152a5beff6db446e215025f255c5c09cda784ee35c77296399b71db1ea34e2fbc728ae13e8e35c3e4f919536fa51a191d2e6a6a7c885b4d3e0a02cd25089a", @typed={0x8, 0xb, @pid=r11}, @nested={0x10, 0x2f, [@generic, @typed={0xc, 0x23, @u64=0x800}]}, @generic="b4342345eed49921d82e9f833487fd4898cd15fe417512f41c1adaf3b3a68c9f6641812f013a8b70f8a3bd685064f785471f9c910d34657ca710d58d6283477e617ef9a5c113d1debe577bc7b899c5e1c47f9e0569e883d4d94ecf83fb9d3c2a601eb5074f245ee8597d55c1376fa2e1093360111afa6d94647eb74a8f898c75bc470f568ce2803662242d3fccdefab2841b5044604f1de7d56f635fc79a6f44a7f7f29594b4ba3975cdc49717c6", @generic="930ace4057f5b28c9944bde59dfe"]}, 0x24d4}, {&(0x7f0000004d00)={0x1314, 0x19, 0x300, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0xc, @u32=0x1}, @nested={0x128, 0x25, [@typed={0xc, 0x45, @u64=0x6}, @generic="c23531a40425e50b915bbb0fea25272b5779a6de696def8869c8950ddddb4f406703037a3767f66b17d2dc4443b0c15bdb6c849b538c82c351c68ab772d0e173992b34db4012e2bfbf7e5f4597c6021ca1186d1cf036cb88c66b84278addeb20c1e00903be3b17b4635eca0d907caa8574e9ab89252a07f0a2c67d189310c78c5880ec30b9cd6c5b0e37e304bd30666bf8062f962cde81c94e97c3527857edde9b8e7c", @generic="9a6fa91d643fc134d1619bf73ecedd2ed7006a62c8086faf8703f0e0443f2cd87d3e4c760a6326b87be74efc2f6efaa940a6422ce37b6757686f678793e6cbd1ba1c2791919664fa999cd3beb28829012afda2131d0e2162b38f569c0c255142c7e3f7073759a7", @typed={0xc, 0x2d, @u64=0x40}]}, @nested={0x1090, 0x61, [@generic="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", @generic="aec4d9a54e08e7e99c20400d2a87c182512c71b8b81790d11866d7e625488ab55db29a0649a8fa1b2a7e659579f9e93cb39c0f3ad1b947515a27d576276ba3aaf93cec0fc387c1fe1d29e5926704d7ea5c710b6b2f4f5576daa32f8e35d5f4caeefdfdd09df307ad7877589b76c9ba92276705dad993c5f3133c1e44cdec0f7ff255f869efd8d2212b"]}, @generic="a5d4c5397a6c3ba07231231326711a184509629aa2f485c40adbb64d2d45c24792d316", @generic="d11a9ef8f6b4e2d9ec60ff24658796be6d2c1ed0be0bbe55b164b670a173b70580e89054b48ec261346fe5f18522388a32cda5ec623b65b58d246a65300ddb342b92b4d09a82b0625b6ec0bfe57924e1a8d147ebc0648f6230fd1af34a66655e9e8f7f36f8442492e2f216cc5d98c66b7d31d76dad71f2405863ddf8cbdbd5d0bdb78469f845946ffcb93457ff4a4e043ca2a75222bb156c84b9ce09db8239534caad6337bab39bc8ab00a743e21ba7bef886f11cfd1fb2b82c59495dad78e3f0d9dc81738425acfb7801e6e86ea8109f96248ce5b3b59a44b76afb7b8261a9dece27d8e5d107d58287dd345afc2ef", @typed={0x8, 0x1a, @fd=r2}, @nested={0x14, 0x67, [@typed={0x10, 0x36, @str=',#security*\x00'}]}, @typed={0x14, 0xa, @ipv6=@local}]}, 0x1314}, {&(0x7f0000000740)={0x1d0, 0x31, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@generic="67cbd5882d5db45c53b53468a4850a97950bd314f4ad53110e912180166a0f85ccf4a6bc46d5076f9c2d2a9ef9fe0f635913391b10aa4566ccc5da937653d39db0e48052bdefb23316ee854fb9b2cb43de40deb2c6c4620a4b7662348bfb24a89666738b9fdfce9e48928a4613f89bb3be1c18cb7ac9b437ccf6904e2b33a8a0ffe3e737d312a70d1e4b388a28465746c33362c1c065307907aa39869044cb1c9020b6622e1b72e25362b16306acaf6a3e8d7a3a63eb8f81ab2f0c33faf725f9e801f9838aaaa31647a2760938ddaa0367a93aeeb7d083ab2ebbc334179f225f9c9f71993cddbc626f5bd6c14960ff750a", @typed={0x8, 0x66, @pid=r12}, @generic="e0273b07d993a8b4f91a4b74f08873570e233abf23038d49edad0155ad77769527dfed4288e043d8b2fc6daa8c781110e42f1fe18e6317e7d59b50808f37eceefe65c543f9c0ffec4935e0e259176324c9b97a4b679cdd61f1400e348422efc49a44dd5d421068fbf6d5bb9c", @typed={0x8, 0x45, @u32=0x3}, @nested={0x48, 0x82, [@typed={0xc, 0x1a, @u64=0x3}, @generic="0847dfcac13e08c7d1bd7999887952f93ec233eb1d3e4b3622e7e8e97bbdd59c", @typed={0x10, 0x47, @str='\',cgroup%\x00'}, @typed={0x8, 0x72, @u32=0x2}]}, @typed={0x8, 0x70, @ipv4=@rand_addr=0xd8d}]}, 0x1d0}, {&(0x7f0000000940)={0x24, 0x39, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0x32, @ipv6=@ipv4={[], [], @multicast2}}]}, 0x24}], 0x5, &(0x7f0000000c00)=[@rights={0x30, 0x1, 0x1, [r0, r13, r1, r1, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x50, 0x80}, 0x4000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x3ff, 0x1, 0x8}, 0xfffffffffffffeba) 03:40:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x197]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x2, 0xffffffff) 03:40:22 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x85e, 0x4, 0x8, 0x3, 0x0, 0x7, 0x84000, 0xd, 0x4, 0x2c, 0x7, 0x7, 0x74, 0x3, 0xde11, 0xf78, 0x1, 0x7, 0xffffffff, 0x6, 0x2d2d, 0x4, 0xffffffffffffffff, 0x3ff, 0x9b, 0x3, 0x8b0c, 0x3, 0x0, 0x1, 0x0, 0x10001, 0x1, 0x32f8, 0x7ff, 0x1, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x20, 0x80000000, 0x792f, 0x4, 0xff, 0x6, 0x4}, r1, 0x4, r0, 0x8) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xaf, 0x0, 0x38a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0xcfb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x1a, 0x56f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'vY\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)}]) 03:40:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x300], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x30100c000000000) 03:40:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(r2, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) r3 = getpid() sched_setparam(r3, &(0x7f00000000c0)=0x77e6) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x9, @mcast2, 0xc0e5}}, 0x0, 0x8, [{{0xa, 0x4e23, 0x6, @empty, 0xffff}}, {{0xa, 0x4e24, 0x4, @mcast1, 0x80000000}}, {{0xa, 0x4e24, 0x9, @loopback, 0x3}}, {{0xa, 0x4e20, 0x7ff, @loopback}}, {{0xa, 0x4e23, 0x7fff, @ipv4={[], [], @rand_addr=0x8}, 0x3}}, {{0xa, 0x4e23, 0x8, @local, 0x9}}, {{0xa, 0x4e23, 0x54, @dev={0xfe, 0x80, [], 0x1c}, 0xffffffffffffff81}}, {{0xa, 0x4e24, 0x4, @empty, 0xf0}}]}, 0x490) 03:40:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIAS={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x34}}, 0x0) [ 597.567810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 597.576761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:40:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xd, 0xffffffff) 03:40:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x900000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) [ 597.655366] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 597.661972] 8021q: adding VLAN 0 to HW filter on device bond1 03:40:23 executing program 1: socketpair$inet6(0xa, 0x3, 0x401, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000400)=@dstopts={0x63, 0x20, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x226e}, @generic={0x9, 0xf3, "62910056818e41501feb9f876b82dc3f9b86efc4722ddd94a27fec035b7131792b4a054ac1ee5d07cf1be348dd7e99869c1d95d7964de09ad222d0f48fe4407bbb258793b191ff4912ed18631cf0c645c9647e337c30612de942cfebd5d99626e246088ab4e43a75d1dfc79a92d4929246901bbdeed3a4c0b3d4c5b1f2799b21f48ba320038bf46899588d13c7d7f9496a644c6d5ec8a3427f590e5a787c61f60af1b1c3c7ed722a66ef21b734f6a3bedc548256c7140767443f7bd1bef259f339dfd424a22e7e176acb3fd8639e2932208fcce853fe16f62520cd184b8abe70bfdea61a56672202207ff2bad47864ef11f914"}]}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000600)={'nat\x00'}, &(0x7f00000001c0)=0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="bb3ebb806ed2e52abf9b44d5bd77495ff9a84403a476705acd2a5718c42522b0000bf35dc8c31a4373aa992063e27cf6447d79869372fb766fe006300153761d0e443faa63aedefae027b84ef038c72f5c70bc6f293d085e2b4996a96201fc15d4c44894220f1bd252b672d2a92ca3417c06e3851965cf04f7f7d75c97f889ab95d793003d061deb74000000000000000000000000000000"], 0x3) ioctl$KVM_NMI(r1, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[], 0xfc8a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000380)=0x78) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x80002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="27000000b217eed59d41f26dae28d47547119e2880cec333eb59ae1dfceef023359f0ffbe0be6da9158bc8f0dcd74b15d918"], &(0x7f0000000240)=0x2f) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r6, 0x4) fstatfs(r2, &(0x7f00000006c0)=""/68) 03:40:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 597.755579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:40:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) 03:40:23 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="01b524b132d7d717efdf4c730bc12a1c0525e4499dbf87a8803032249de37281a9dc6039df0fe555cd7a8347ac079b7634118b9a9dce739be4eb8c6673b7e22b0c5d921331ff403161d7475b13e918dbd6a8cea5e91e0e06", 0x58, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000580)="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", 0x1000, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r1, r0}, &(0x7f00000004c0)=""/146, 0xffffffffffffff29, &(0x7f0000000040)={&(0x7f0000000400)={'.m4-generic\x00'}}) 03:40:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xdc, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x45, @dev={0xfe, 0x80, [], 0x17}, 0x100}, @in6={0xa, 0x4e20, 0xff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x40000000000000}, @in6={0xa, 0x4e23, 0xfffffffffffff001, @remote, 0x7}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x7f, @remote, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x2}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x8001}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)={r2, 0xec5f, 0xd6, "a3d0f183e901d796f51ee5ec3df580e2f4228d73bb9fac432430ac3d4a2efb38591f51a4aaa8a7784067c0b682a250f6504c916efdaf869e0c9345dd06d43ebf190cc5dcecb47da3c763b09fd6bf1b14d14b60c75577b69066ccd73d09a81e939ffcfb464672bfb8c5649a88ec90bd98339c3f8df397b694cf8afe7509a71cbbdcd4761fa2e9d18febe9faa9e035a6477cdef25685755d33a577c83b7b1682bc635317370330e159f4efe0e211bcedb589be01ef9e03535fdb5b06679337571c134c9144fe8a0e34b795e1fc38f618c6cb389f6be3e0"}, 0xde) r3 = syz_open_pts(r0, 0x0) read(r3, &(0x7f0000000280)=""/191, 0x42) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0xbc2}) ioctl$TIOCGLCKTRMIOS(r3, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}) 03:40:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x600000000000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:23 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140008030000000100000002", 0x69, 0x1400}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000efc4672305bc5b71e5e2d46e6e6da0dfc575476ac51f65665d793e95a396de94bd9568353881f4645ebfcdee8f59a96ba8a042e051b52b3ac9bb54c3b9d59535b07496dcd5c2fd617b0305e8bf8956f3630c754ce29a06000000000000002b214bd5cc1492ce86836387fc142140719f8a1fd0a52d66233582cd7d4aa441a607fd952c6bdc7ae09e4b1c7ceb06066cbab21f00f5724c7b3ddbc5987d92f3bfb6872b33e01d8f6f3ebb261816de2f495143864b53422b483330b74c6968c138"]) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x895d, 0x81) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x9, 0x200, 0x820, 0x80000001, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={r2, 0x6, 0xd1}, &(0x7f0000000400)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x0, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fgetxattr(r0, &(0x7f0000000480)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)=""/114, 0x72) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x30, r3, 0x43) 03:40:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x900, 0xffffffff) 03:40:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000320000002abd7000ffdbdf2500d4a10108000400e10a00000c0000010000000c00020000000000000000000800040008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = getuid() r4 = getgid() setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000002c0)=0xfffffffffffffffa, 0x4) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x281, {0x0, 0x1, 0x5}, 0x1, r3, r4, 0x7, 0x80, 0xff, 0x6f3a, 0x4a7, 0x40, 0x8, 0x1, 0xb46, 0x0, 0x101, 0x81, 0x7, 0x6, 0x2}}, 0xa0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x103fc, 0x3, 0x400000007, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:40:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd004) [ 598.180707] f2fs_msg: 14 callbacks suppressed [ 598.180716] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 598.192483] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock 03:40:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x9000000, 0xffffffff) 03:40:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x6000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:23 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000240)=0xffffffffffffff80, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1ff}, 0xb) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) fcntl$getflags(r0, 0x40b) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'team0\x00', @random="01003a1e2410"}) 03:40:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f00000001c0)='\n\\p') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80801, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000240)={0x101, 0x3, 0x4, 0x1, 0x9}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) epoll_wait(r3, &(0x7f0000000080)=[{}, {}], 0x2, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000180)) 03:40:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x7, 0x4, 0x7fffffff, 0x0, 0x1, 0x4, 0x7ff, 0x0, 0x3, 0x8000, 0x5, 0xfffffffffffffffc, 0x0, 0x7, 0xcd, 0x200, 0xcf, 0x734b, 0x480000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="5bea4ef5ab6e184792d1065dbb3ebb225509b3061f69308b4111a33b6d2d1d2a94f3942a599030846f8269acbce37a973c0f30eb62bce13e5dfb64884d8d3cb356a630aeaa"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="f12f34bcdcdb90180f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 598.288400] F2FS-fs (loop7): Wrong SSA boundary, start(4096) end(134222848) blocks(1024) [ 598.296750] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 598.305767] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 598.313160] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 598.321127] F2FS-fs (loop7): Wrong SSA boundary, start(4096) end(134222848) blocks(1024) [ 598.329501] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 598.371714] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 598.378894] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock 03:40:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x7000000, 0xffffffff) 03:40:24 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) 03:40:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffffffffffff}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="bb3ebb"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="fb91ddd2df0fde343b3cfcd2695c930fd49daa44eb631d0a26dde980c466e4a659a19a4403d094f8c9f8c3ed403951cc72fa6788aea1c96a5038d7ae9c", 0x3d, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) 03:40:24 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0x9000000], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6e0) [ 598.901510] *** Guest State *** [ 598.905392] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 598.914369] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 598.923255] CR3 = 0x0000000000000000 [ 598.927061] RSP = 0x0000000000000006 RIP = 0xffffffffffffffff [ 598.933082] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 598.939360] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 598.946139] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 598.954644] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 598.962680] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 598.970717] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 598.979219] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 598.987251] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 598.995293] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 599.003850] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 599.011905] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 599.019947] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 599.027993] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 599.034465] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 599.042488] Interruptibility = 00000000 ActivityState = 00000000 [ 599.054191] *** Host State *** [ 599.057472] RIP = 0xffffffff811f3df4 RSP = 0xffff8801b0e67350 [ 599.063538] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 599.070050] FSBase=00007f03d49d1700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 599.077915] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 599.083887] CR0=0000000080050033 CR3=00000001bc425000 CR4=00000000001426e0 [ 599.090962] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 599.098229] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 599.104385] *** Control State *** [ 599.107922] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 599.114646] EntryControls=0000d1ff ExitControls=0023efff [ 599.120178] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 599.127158] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 599.134424] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 599.141085] reason=80000021 qualification=0000000000000000 03:40:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9701000000000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="48000000140019eca54dcbeafd0d8c560a84ffe00600000000000000a2bc5603ca00000f7f81001e362d6f53000101ff0000000309ff5bffff00c7e5ed5e00000000000000b32b2d", 0x48}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 03:40:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6000000, 0xffffffff) 03:40:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x3e8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000985000), 0x0, &(0x7f0000164000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 599.147473] IDTVectoring: info=00000000 errcode=00000000 [ 599.152965] TSC Offset = 0xfffffebcf407d2f2 [ 599.157358] EPT pointer = 0x00000001cf8a501e 03:40:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000040)) 03:40:24 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='trusted+\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) fchmod(r1, 0x8) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100050, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x38, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d630000106308400200000000000000076304400300000008631040", @ANYRES64=r2, @ANYBLOB="0300000000000000000000000000000000000000"], 0x64, 0x0, &(0x7f0000000200)="6275147d6f16e22af15222cb9acde7b6f0f91e78954c95594fdceef01112a5c9ee66cac51e85a8cf8516a784d806e15863e7354bb7986116fc79e146d1608eee3d61d410c5e3afe59b27849022ca545e8da703587cea21449799a0f76badf6411d7b35a0"}) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x6) close(r0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0x800000000ffff}, 0x0) syz_mount_image$nfs4(&(0x7f00000002c0)='nfs4\x00', &(0x7f0000000300)='./file0\x00', 0x100, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="6d722dd35b86ffdc0da4135ec8df1185e6482b6d194fb57de3d2f6542c2238419a8122221c0db20080f7d7847a8b2401107f27b0e24c7285a058866c1bafda9ece55e56bd911155166ec14fb01844dabf0ba243b2ad47d30989dc8ed1c03c2a467f832b9eb2ee670e334e177cdbe2294fd1710c36495dd2c6508511a56afd71e6030398a86aa5cd59e508f", 0x8b, 0x8}], 0x420, &(0x7f0000000440)='user\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10400, 0x2) 03:40:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) 03:40:24 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xf], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xf00, 0xffffffff) 03:40:25 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f0000000140)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffff7f00026000daaf7fec7a4f"], 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x355) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r0, 0x840001) sendfile(r0, r2, &(0x7f0000000180), 0xa00004000000002) 03:40:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x140) 03:40:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 599.700277] *** Guest State *** [ 599.703818] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 599.712791] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 599.721685] CR3 = 0x0000000000000000 [ 599.725455] RSP = 0x0000000000000006 RIP = 0xffffffffffffffff [ 599.731514] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 599.737575] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 599.744341] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 599.752529] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 599.760702] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 599.768801] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 599.776839] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 599.784919] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 599.792931] GDTR: limit=0x0000ffff, base=0x0000000000000000 03:40:25 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0x6c00, 0xffffffff) [ 599.800988] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 599.809071] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 599.817143] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 599.825197] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 599.831678] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 599.839183] Interruptibility = 00000000 ActivityState = 00000000 [ 599.845655] *** Host State *** [ 599.848914] RIP = 0xffffffff811f3df4 RSP = 0xffff880198fb7350 [ 599.854967] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 599.861440] FSBase=00007f03d49b0700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 599.869328] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 599.875275] CR0=0000000080050033 CR3=00000001bc425000 CR4=00000000001426f0 [ 599.882376] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 599.889106] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 599.895222] *** Control State *** [ 599.898730] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 599.905463] EntryControls=0000d1ff ExitControls=0023efff [ 599.910974] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 599.917976] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 599.924865] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 599.931504] reason=80000021 qualification=0000000000000000 [ 599.937866] IDTVectoring: info=00000000 errcode=00000000 [ 599.943397] TSC Offset = 0xfffffebcf407d2f2 03:40:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) sched_yield() ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="db1df224d6c617d98e8f01193918b38d603aca15b23c65d31deb1dedec73c3388ef746d6879d3e826ca689c38969321f7c08b4af4ef6576f"], 0xfe1d) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c330a00145f8f764070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000100)) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x101, 0x4) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 03:40:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xb], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}}, 0x0) [ 599.947773] EPT pointer = 0x00000001cf8a501e 03:40:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9e00000000000000) 03:40:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070") ioctl$TCSETSW(r0, 0x402c542d, &(0x7f00000000c0)) 03:40:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[0x0, 0x0, 0x0, 0xf0ffffffffffff], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x205, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=""/4096, 0xf000}) 03:40:25 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xc00, 0xffffffff) [ 725.984889] kworker/dying (50) used greatest stack depth: 11448 bytes left [ 861.151294] INFO: task kthreadd:12261 blocked for more than 140 seconds. [ 861.158315] Not tainted 4.18.0-rc8+ #182 [ 861.162942] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.171050] kthreadd D28056 12261 2 0x80000000 [ 861.176897] Call Trace: [ 861.179554] __schedule+0x87c/0x1ec0 [ 861.184058] ? __sched_text_start+0x8/0x8 [ 861.188435] ? graph_lock+0x170/0x170 [ 861.192370] ? find_held_lock+0x36/0x1c0 [ 861.196455] ? find_held_lock+0x36/0x1c0 [ 861.200549] ? find_held_lock+0x36/0x1c0 [ 861.204630] schedule+0xfb/0x450 [ 861.208236] ? __schedule+0x1ec0/0x1ec0 [ 861.212271] ? kasan_check_read+0x11/0x20 [ 861.216569] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.221052] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.225694] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 861.230835] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 861.235892] ? trace_hardirqs_on+0xd/0x10 [ 861.240108] kthread+0x26a/0x410 [ 861.243645] ? loop_get_status64+0x140/0x140 [ 861.248093] ? kthread_bind+0x40/0x40 [ 861.251934] ret_from_fork+0x3a/0x50 [ 861.255773] [ 861.255773] Showing all locks held in the system: [ 861.262151] 1 lock held by khungtaskd/772: [ 861.266444] #0: 00000000ab18c1fe (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 861.275159] 2 locks held by rs:main Q:Reg/4312: [ 861.279850] #0: 00000000f1364509 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 861.287870] #1: 000000000bb09497 (sb_writers#6){.+.+}, at: vfs_write+0x452/0x560 [ 861.295570] 1 lock held by rsyslogd/4314: [ 861.299750] 2 locks held by getty/4404: [ 861.303743] #0: 00000000af2f1fb8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.312056] #1: 00000000030c120d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.320957] 2 locks held by getty/4405: [ 861.324979] #0: 00000000fb07989e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.333302] #1: 0000000035899cd9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.342185] 2 locks held by getty/4406: [ 861.346174] #0: 00000000b695ba17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.354472] #1: 00000000cfa9582e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.363409] 2 locks held by getty/4407: [ 861.367410] #0: 00000000a11992b9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.375712] #1: 00000000a0e524d4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.384605] 2 locks held by getty/4408: [ 861.388600] #0: 00000000ce4bec6a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.396878] #1: 00000000bc096b58 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.405798] 2 locks held by getty/4409: [ 861.409797] #0: 00000000e76d4a64 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.418093] #1: 00000000bfbd20a4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.427110] 2 locks held by getty/4410: [ 861.431134] #0: 0000000062e1df8e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 861.439412] #1: 0000000039721007 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 861.448336] 1 lock held by syz-executor2/12260: [ 861.453064] [ 861.454715] ============================================= [ 861.454715] [ 861.461756] NMI backtrace for cpu 0 [ 861.465416] CPU: 0 PID: 772 Comm: khungtaskd Not tainted 4.18.0-rc8+ #182 [ 861.472336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.481715] Call Trace: [ 861.484346] dump_stack+0x1c9/0x2b4 [ 861.487974] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.493154] ? vprintk_default+0x28/0x30 [ 861.497203] nmi_cpu_backtrace.cold.4+0x19/0xce [ 861.501855] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 861.506250] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 861.511472] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 861.516745] arch_trigger_cpumask_backtrace+0x14/0x20 [ 861.521923] watchdog+0x9c4/0xf80 [ 861.525383] ? reset_hung_task_detector+0xd0/0xd0 [ 861.530242] ? kasan_check_read+0x11/0x20 [ 861.534375] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.538770] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 861.543857] ? __kthread_parkme+0x58/0x1b0 [ 861.548074] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 861.553094] ? trace_hardirqs_on+0xd/0x10 [ 861.557234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 861.562759] ? __kthread_parkme+0x106/0x1b0 [ 861.567070] kthread+0x345/0x410 [ 861.570425] ? reset_hung_task_detector+0xd0/0xd0 [ 861.575249] ? kthread_bind+0x40/0x40 [ 861.579044] ret_from_fork+0x3a/0x50 [ 861.582821] Sending NMI from CPU 0 to CPUs 1: [ 861.587375] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 861.588370] Kernel panic - not syncing: hung_task: blocked tasks [ 861.601734] CPU: 0 PID: 772 Comm: khungtaskd Not tainted 4.18.0-rc8+ #182 [ 861.608641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.617976] Call Trace: [ 861.620553] dump_stack+0x1c9/0x2b4 [ 861.624183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.629360] ? printk_safe_log_store+0x2f0/0x2f0 [ 861.634117] panic+0x238/0x4e7 [ 861.637307] ? add_taint.cold.5+0x16/0x16 [ 861.641442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.646965] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 861.652399] ? printk_safe_flush+0xd7/0x130 [ 861.656708] watchdog+0x9d5/0xf80 [ 861.660157] ? reset_hung_task_detector+0xd0/0xd0 [ 861.664989] ? kasan_check_read+0x11/0x20 [ 861.669126] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.673520] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 861.678605] ? __kthread_parkme+0x58/0x1b0 [ 861.682825] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 861.687827] ? trace_hardirqs_on+0xd/0x10 [ 861.691978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 861.697503] ? __kthread_parkme+0x106/0x1b0 [ 861.701810] kthread+0x345/0x410 [ 861.705224] ? reset_hung_task_detector+0xd0/0xd0 [ 861.710064] ? kthread_bind+0x40/0x40 [ 861.713852] ret_from_fork+0x3a/0x50 [ 861.717849] Dumping ftrace buffer: [ 861.721376] (ftrace buffer empty) [ 861.725064] Kernel Offset: disabled [ 861.728681] Rebooting in 86400 seconds..