write(r5, &(0x7f0000000340), 0x41395527) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000f80)=""/34) write$binfmt_misc(r5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) getdents(r4, &(0x7f0000000000)=""/136, 0x88) 09:31:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="dde20f100fc1c79a93edf7e95ad2a3ceb954bf7b28df4f7b25", 0x19, 0x0, 0x0, 0x0) 09:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01a1d210", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r5}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r5, 0x27, "6e425f5a65e939c7b5100b74ca3445f7794d4ab4a69d6af386862897849029ce43df3d211bdb51"}, &(0x7f0000000080)=0x2f) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x78}, 0x8) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r7) fcntl$setownex(r7, 0xf, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r8 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,wfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 09:31:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000003, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x6, 0x0) 09:31:04 executing program 1: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@remote, 0x1a}) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x15}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:31:04 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) [ 561.247630] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.247831] 9pnet: Insufficient options for proto=fd 09:31:04 executing program 1: getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) gettid() ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) syz_open_dev$dmmidi(0x0, 0x8001, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xffffffffffdfff3f, 0x2}) 09:31:04 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x1a5, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) write$UHID_INPUT2(r2, &(0x7f00000000c0)={0xc, {0x63, "48889e08659c33e0ff1552f682a91157b44ebc88a752d3d45195f719c66e751f6ab986fe8c3921722d7a77dc1c86860c1e73f9e36785c1df9ac8172b5cffca6878ea82f22addda8826f00f23562e106adb33f1e92518a34c46a6d9d8ab448b38744be2"}}, 0x69) [ 561.306966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 561.329757] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.348070] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 09:31:04 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@lockproto_nolock='lockproto=+ock_nolock'}, {@locktable={'locktable', 0x3d, '/dev/vcsu\x00'}}]}) 09:31:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc0000008000000b) [ 561.402538] binder: 19480:19484 unknown command 0 [ 561.407823] binder: 19480:19484 ioctl c0306201 20000780 returned -22 09:31:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x600, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x61, 0x8, 0x6, 0x1}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)={r7, 0x42, "5915610ddfdf851c6843e0ca8080a8edfe821b2e742438996645f806ad2000023e5e3827e76a58e817953e698dd2e90125208226022f9f00ab3df2b12a0b0ae98989"}, &(0x7f00000005c0)=0x4a) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000600)={r8, 0x81}, &(0x7f0000000640)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x400000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x24c800, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="00403366a6cf0664f729ba0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000180)={r11}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r11, @in6={{0xa, 0x4e21, 0x1, @local, 0x8000}}, 0x1, 0x4, 0xaee0, 0x2, 0x4, 0x9, 0x5}, &(0x7f0000000200)=0x9c) 09:31:05 executing program 2: r0 = mq_open(&(0x7f0000000080)='!selinuxselinux\x00\xc4sbe\x1b\x9a\xd5\xdeV\x02T\xee\x94H\xc0\t\xf7\xdd\xf8\xd35\xe4\x88\xfe|\xd7\x1bD\x8a\xaa|N\xb9|.)2I\xd1$\xdf\a\xb4\xe2\xe2Ox\xc0\xb0\xed\xcd\x0e\xf0X', 0x800, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/204, 0xcc, 0x0, 0x0) 09:31:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2, 0x0) 09:31:05 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7620268aa4df2a974e14d7a3bd5794412a267d13a4f74e16956700000000299cb89bbced4b38079074d8af730a3b87e09d933be4041cbe1409bacbcfe521974fbdda143d62630f48fb64195bcfc825701ee96b5ad457d5b266fab329", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d3cc3c9b09c427f60b532414c304614a936c2b1a9db3dc93e4f83646e2c809a474109a3cca431be14d24b599cc4bc0e9fe4e1bd70f0e76f03c5421ab8aaaf48e4f7d128cc79ef709154e6827e9614873bc6c04c7dab61f88630c69b896b99b9cafcb1a62ef9b8caa6ef893b404af9d99fda797d4a7b3d403c249423a61798aeb803ad96ec5609e19f7244d3763951d18148005d9e247bad9cf8bb06a7feb7997bab95bffd89dc20bb5d39277b", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$input_event(r1, &(0x7f0000000000)={{0x0, 0x2710}, 0x11, 0x101, 0x101}, 0x18) [ 561.474298] gfs2: can't find protocol +ock_nolock [ 561.538653] gfs2: can't find protocol +ock_nolock [ 562.050588] 9pnet: Insufficient options for proto=fd 09:31:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/101, 0x65}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) fchmod(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0xfffffc7a, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 09:31:07 executing program 5: pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 09:31:07 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x3}) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x8, 0x0, 0x4, 0x6, 0x1, 0xde, 0x2, 0x1f, 0x6, 0x1f, 0x4, 0x6}, {0x8, 0x3f, 0x6, 0x1f, 0x5, 0x0, 0x1, 0x2, 0x2, 0x5, 0x0, 0xbc, 0x8}, {0x1f, 0x1000, 0x51, 0x81, 0xff, 0x5, 0x7, 0x8, 0x81, 0x3, 0x4, 0x81, 0x100000000}], 0x9d}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1, 0x2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c63030000000000000000000000000000000e630c4000"/36], 0x0, 0x0, 0x0}) 09:31:07 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/155, 0x9b}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x2, 0x0, 0x800e00515) shutdown(r0, 0x0) fcntl$getflags(r1, 0x3) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 564.182603] binder: 19523:19534 unknown command 221964 [ 564.188236] binder: 19523:19534 ioctl c0306201 20000780 returned -22 09:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x402b23, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$dupfd(r2, 0x0, r1) pipe(&(0x7f00000001c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffdd1) close(r9) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600616e733d66642c7264646e6f3d", @ANYRESHEX=r0, @ANYBLOB="040000006e6f97c10609a3082ea44c5a6f6ddd503d", @ANYRESOCT=r2, @ANYBLOB=',\x00']) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r9, r12}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$PPPIOCSMRU(r15, 0x40047452, &(0x7f0000000080)=0x7) r16 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$KVM_CREATE_IRQCHIP(r19, 0xae60) ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x0) ioctl$ION_IOC_HEAP_QUERY(r19, 0xc0184908, &(0x7f0000000100)={0xffffffffffffffa3, 0x0, &(0x7f0000000300)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r16, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r16, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) 09:31:07 executing program 4: socket$kcm(0x2, 0x0, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@lockproto_nolock='lockproto=+ock_nolock'}, {@locktable={'locktable', 0x3d, '/dev/vcsu\x00'}}]}) 09:31:07 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "b8de9e6167d8e75b949ecdae51597339c8d8ff5a"}, 0x15, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f0000000140)={0x0, @src_change}) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r10, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63fd1139407a630000400028000000000000000000000000480f752900"/44], 0x0, 0x0, 0x0}) 09:31:07 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 09:31:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00'}) 09:31:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000e9014d564b"]) [ 564.448090] binder: 19553:19555 unknown command 301818636 [ 564.466742] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.472473] binder: 19553:19555 ioctl c0306201 20000780 returned -22 [ 564.485780] gfs2: can't find protocol +ock_nolock [ 564.628022] gfs2: can't find protocol +ock_nolock 09:31:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/101, 0x65}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffc7a, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 09:31:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r1, r0, 0x0) 09:31:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 09:31:17 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() tkill(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x8) close(r0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:31:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/155, 0x9b}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x2, 0x0, 0x800e00515) shutdown(r0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 09:31:17 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) dup2(r1, r0) read(r0, &(0x7f0000000c80)=""/99, 0x63) 09:31:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 09:31:17 executing program 2: [ 574.598299] devpts: called with bogus options [ 574.609289] devpts: called with bogus options 09:31:18 executing program 1: 09:31:18 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000200)={0x5d}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_names\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fcntl$dupfd(r9, 0x0, r8) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$RTC_IRQP_SET(r14, 0x4008700c, 0x17da) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x3}}, 0x20) 09:31:18 executing program 1: 09:31:18 executing program 2: 09:31:18 executing program 5: 09:31:18 executing program 1: 09:31:18 executing program 4: 09:31:18 executing program 2: 09:31:18 executing program 1: 09:31:18 executing program 4: 09:31:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 09:31:20 executing program 5: 09:31:20 executing program 2: 09:31:20 executing program 4: 09:31:20 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x40000000, 0x689}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, [0x2, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x8dffffff00000000, 0xfe03, 0x0, 0xfffffff5, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x68f8}}}}}}, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:20 executing program 1: 09:31:20 executing program 4: 09:31:20 executing program 5: 09:31:21 executing program 1: 09:31:21 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084100000000000000000e630c4000"/36], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc8800) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f00000000c0)) 09:31:21 executing program 2: 09:31:21 executing program 4: [ 577.776222] binder: 19663:19667 unknown command 1091068688 [ 577.782390] binder: 19663:19667 ioctl c0306201 20000780 returned -22 09:31:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 09:31:23 executing program 5: 09:31:23 executing program 1: 09:31:23 executing program 2: 09:31:23 executing program 4: 09:31:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300000b6300001008400400efe0000000000e630c404d3900f35b1578125100000000000040000000000000"], 0x0, 0x0, 0x0}) 09:31:24 executing program 2: 09:31:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x1000000000000012}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffff81, 0x0, 0x0, 0x800e00729) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) shutdown(r2, 0x0) 09:31:24 executing program 5: 09:31:24 executing program 4: [ 580.664078] binder: 19675:19678 unknown command 71305232 09:31:24 executing program 2: 09:31:24 executing program 5: [ 580.719916] binder: 19675:19678 ioctl c0306201 20000780 returned -22 09:31:26 executing program 5: 09:31:26 executing program 4: 09:31:26 executing program 2: 09:31:26 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$SIOCAX25OPTRT(r8, 0x89e7, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r9}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r9, 0xfffffffe}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r10, 0x1}, &(0x7f00000001c0)=0x8) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c40000000000000000000000000145722b36f45feae4ea205c5e55c461d1c6cc1e891b08696483a920081723785c4fcd44b627f8608d316ed6d4c976ce3bc7327d409b2084647a11c9ee69c302ef866976781bd8b14e3c2de00"/127], 0x0, 0x0, 0x0}) 09:31:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 09:31:26 executing program 1: 09:31:27 executing program 4: 09:31:27 executing program 1: 09:31:27 executing program 2: 09:31:27 executing program 5: 09:31:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 09:31:27 executing program 5: 09:31:27 executing program 4: 09:31:27 executing program 3: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x804) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x3e, "6a93421306e58bc82a81ae74d140765979cabd5be7c2845cd4e5dfe43f2e5c2f63e192df9bdbfed2b4e3216a44d73e0958b26bb9286a054f48c2fd4d6448"}, &(0x7f0000000040)=0x46) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x400, 0x5f}, &(0x7f0000000180)=0x8) 09:31:27 executing program 2: 09:31:27 executing program 1: 09:31:27 executing program 5: 09:31:27 executing program 4: 09:31:27 executing program 4: 09:31:27 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$FICLONE(r1, 0x40049409, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:27 executing program 2: 09:31:27 executing program 1: 09:31:30 executing program 4: 09:31:30 executing program 5: 09:31:30 executing program 1: 09:31:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @remote}, &(0x7f00000000c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 09:31:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) flistxattr(r2, &(0x7f0000000280)=""/202, 0xca) 09:31:30 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) 09:31:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d000000000000000000001a00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c0008"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 09:31:30 executing program 2: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom$inet(r2, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0) r4 = dup(r2) recvmsg(r3, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) recvmsg(r3, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) shutdown(r1, 0x0) 09:31:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = dup(r4) write$P9_RLERROR(r5, &(0x7f0000000040)={0x16, 0x7, 0x2, {0xd, '/dev/binder#\x00'}}, 0x16) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:30 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000001c0)={0x0, 0x8}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x7494c1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000004) listen(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x889) open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000056ed", @ANYBLOB], 0x2}}, 0x0) [ 586.975433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 587.011272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.025291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.038603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.052910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 09:31:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 587.065595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.078806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.091387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.105156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.137649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 [ 587.162324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19769 comm=syz-executor.5 09:31:30 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 587.212883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:31:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:30 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) gettid() tkill(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="230000002d00071f1dfffd946fa2830020200ae800000000a61d85680c1ba3a20400fd7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 09:31:33 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x4, 0x3, 0xdb3, 0x401, 0x3]}, &(0x7f0000000140)=0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004082}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x80, 0x0) 09:31:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 09:31:33 executing program 4: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl(r0, 0x800000000006, &(0x7f0000000000)="0805b5055e0bcfe8474071") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:31:33 executing program 0 (fault-call:15 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:33 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5ef95f3f, 0x540800) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 589.926122] 9pnet: Insufficient options for proto=fd 09:31:33 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f46696c6430202a2d206d696d6583445c95115f74797065766d8665c43174727573746564202f7b23406d64f3c5198e5d9e09d87f1bc51173756d5e08643564756d20241b6d264dc6af586b657972696e67736563757269747976626f786e0274316b0a1138594b54e624129a76db695350b27626469a23841f65fb48aaf3be8dca73b341ca5586e6b92dbcc1b4e8135550c6ccc410b02cf5073350f6c0182d53786260019384c30b310a366ca1d3a1a645afb515f1086cae351ae3aa680d9c8e390a2524db84b163a87cd6e430697750e8126921cddb2c5f4b9b6187b6fd36858973998fae94a65d92cd5f590224cc15567f9b4772118123a2c4b6f20484d3536fb70104805066eb63d688c91927ecdb40090097000000005ef993d9a60797f000000000fe6dc2d86a4eaea434ad2ffd39cc8b83f81d9e8188bf43d6b5559346552bd4214a723027dffbb46b7235f85739518b51f5d59dd0080023f785ce8688e0a696cd0800c14ee0e073cb27bf17773a0ae0f37e8f00000035ada92c2375fa71fbea36754f8073bc5fc7b5d2c0a332090cdbc52d40a5ff51121fa56a45be3da4bc151262c4c8e7f845e0a83576bf7f617c6a189fb2c83ea6f6fefe5a5f2a76f51da0e020582339581d31e06ed88552ec0ee404902bd66bf64591983751f853329b4af584905aa70c35b3183d2875cb8bbe44104cb5324735bb04ce542ce0bc36197c6e874cc3c733a05a64695badbb1656e2ddd7f9aef4fa45bce9511fd0b1206877f95a4e7b525b70e6e8acc04fe31e4831addf770d361efe1935c3dd798efed29d283c2d223cb93e5154c24379cabeda375a441d651c591341389593f715ad15c533863e85fae2a10cd9287deefd1ebccf7dedfeb4286d97c99817e7439b06e6dd0000000073413f758daf0602be07c2c1796aac5300000000faffffffffffffff0000cd796d3c844a33f8108e817c5a10fb7a80d6c2660896e3caf6673dec5d01000000e07da1643d44b2ed648aea0f1ef14095c1bfb5f2505ce3cbd01faaa18220a465b28b6884c1a43858bc0672d58607c05c95b6f925d7f92507bef53f6a70498396a8be4ad34bf8eaf17ed8e510191568c3c9746414a85e000000000000"], 0x286) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r2 = open(&(0x7f0000000980)='./file0\x00', 0x80000, 0x30) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r3 = perf_event_open(&(0x7f00000009c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x64cc35409f1cf69b, 0x7fffffffffffffe, 0x1, 0x0, 0x800, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r8, 0x40086432, &(0x7f0000000580)=0x4) r9 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r10) socketpair(0x1e, 0xf, 0x0, &(0x7f0000000480)={0x0, 0x0}) close(r11) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r11, &(0x7f0000000340)={0x0, 0xffffffffffffffd8, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000004c0)={0x2, 'syz_tun\x00', 0x401}, 0x18) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r4, 0x200000000002) r12 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @rand_addr=0x6}], 0x50) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e0720002c50d00000000ae9e5c6ea43b016ce0f3a5", 0x3, 0x1}) signalfd4(r3, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r1, 0x0, 0x0) dup(0xffffffffffffffff) 09:31:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 09:31:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:33 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) bind(r0, &(0x7f00000000c0)=@sco={0x1f, {0x4, 0x21, 0x2, 0x7f, 0x6a, 0x1}}, 0x80) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0xffffffffffffffe0, 0xc0000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000600)={0x0, 0xfff}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000006c0)={r6, 0x80000001}, 0x8) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 590.144533] 9pnet: Insufficient options for proto=fd 09:31:33 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r5) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000280)={0x2c13, 0x400, 0xe999, 0x9, 0x8}) r7 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000200)=0x4) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r9) r10 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = dup(r10) ioctl$SG_SET_FORCE_PACK_ID(r11, 0x227b, &(0x7f00000000c0)=0x1) close(r8) r12 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000000040)={0x3, 0x40, 0x8, 0x6, 0x644b47ef}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 590.284783] 9pnet: Insufficient options for proto=fd 09:31:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:34 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x375}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:36 executing program 5: prctl$PR_CAPBSET_DROP(0x18, 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f2ae0f01bfb2770000640f01d8dbe20f78d2f369c5000000003e26660fae39b8e1fcc3a90f23c80f21f835080010000f23f88fe808eeecff0f221c", 0x3b}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) flistxattr(r1, &(0x7f0000000140)=""/53, 0x336) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) 09:31:36 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000002c0)={0x5, 0x4, 0x6, 0x17}, 0x8) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x28000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080)="4396d40841ad2511efe0581b44cb528b62d951923fef278d5d443c67ec257edb2b44e1af335aa9f1602c60b51b48b37cd2b27db32ba7a4a9f3ab314bf2e6acc300340dd72fafbb16ab86ce4b06bbbf0e5138c12f37f1ca6e7354b6ab9ab42535f8d6e9c0db145ee0de5a2a7f09902bfc40645009c7c95dc8736edb8949c89e68f1e1977fd48a32fef4a4d782589e63759361e46119c63b67312b105082207e5fd97c713e96faf98695b88d956fb5d00721d1d2adb1", &(0x7f0000000140)="1b244c4c7480f54fee9c524f10123142dd54fa347c8c32a2883e1e2214e74069f5803b62b15a4950ebcf1336106a0a3f5cae651d40ec96d69a1973cf1661d5f6e0058be363ac6962dd3ab8a47c387c386a871d2b6faa5dd5a4aae2932fdb66158459c5f43c0b9058c99ca3bb0ce82bccba913837d15a8ccac7560956e9bdb91e607c16f9b0b15afa4857d919283affbfe321a952f2b14357f14b1eb7452e3568e8"}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x10) 09:31:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000504d25a80648c63940d0124fc60100003400a02000005355b51aac38bd5cb75018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 593.219268] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x7, 0xc, 0x4, 0x80000, {}, {0x5, 0x1874b42b353f3bda, 0x52, 0x4, 0xaa, 0x7f, "1363ce0d"}, 0x9, 0x4, @offset=0x2, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x18, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "f85ed029caf9989e"}}}, @CGW_LIM_HOPS={0x8, 0xd, 0xc6}]}, 0x34}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 593.266193] openvswitch: netlink: Flow key attr not present in new flow. 09:31:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x202000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xffff, 0x10, 0x1, r3}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe0, 0x900, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8d501886400de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) 09:31:36 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/229, 0xe5}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x5) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000580)={0x5, 0x0, [{0x6800, 0x15, &(0x7f0000000240)=""/21}, {0x1, 0xb4, &(0x7f0000000380)=""/180}, {0x0, 0x87, &(0x7f0000000440)=""/135}, {0x0, 0xb, &(0x7f00000002c0)=""/11}, {0x0, 0x50, &(0x7f0000000500)=""/80}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r5, 0x0) dup2(r5, r5) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x183) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) restart_syscall() creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x2, 0x1b, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) 09:31:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:39 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') listen(0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000140)=@default) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000940)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) recvmmsg(r2, 0x0, 0x0, 0x101, 0x0) symlink(0x0, 0x0) 09:31:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) 09:31:39 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0, 0xffffffffffffff32}, {0x0, 0xfffffffffffffefa}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = semget(0x3, 0x2, 0x80) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000140)=""/5) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x454) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x108, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01634040030000000000000000000000000000000000000010000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730000000003000000000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="12634840000000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a68730a00000001000000000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df00"/170], @ANYBLOB="aa0000000000000002000000000000000900000000000000852a6877003100"/48], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="10630840000000000000000001634040000000000000000000000000000000000000000000000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6873001000000100"/36], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x200001, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000740), &(0x7f0000000a00)=0x4) 09:31:39 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000000c0)=""/217, &(0x7f00000001c0)=0xd9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:39 executing program 5: pipe(&(0x7f0000000680)) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = getpgrp(0x0) capget(&(0x7f00000002c0)={0x99b8b23, r0}, 0x0) getpgid(0x0) memfd_create(0x0, 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x8) r3 = syz_open_dev$amidi(0x0, 0x9c1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) gettid() r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX]], 0x8}}, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x40) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000980)}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x2) getpgid(r0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) getpid() r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xb0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x5, 0x4, 0x8, 0x67}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x1}}, 0x2da) r8 = getpid() capget(0x0, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r8, r6, 0x0, 0x0, 0x0, r7}, 0x30) r9 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r9, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00'}, 0x30) r10 = getpid() r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) open(0x0, 0xe279a88a3b20cda9, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r12, 0x407, 0xfffffffffffffffe) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r14, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r12, r13, 0x0, 0x102000004) 09:31:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:40 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') listen(0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000140)=@default) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000940)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) recvmmsg(r2, 0x0, 0x0, 0x101, 0x0) symlink(0x0, 0x0) 09:31:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0xd476a02ffbc76578, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="3232ce2774e7a3", 0x7, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 09:31:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:42 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xfffffffffffffffe) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="caffffff0b630000103d5d1d5ed3ef96d09f768c0f702d63084000000000000000000e630c40000000000000000000000000ee5852a2b5147314c1ab8ecd337e73a29214ee10b5ff8d05cbfa8a485505000000e3fea592b6760d880d32e6440a10e4362d57330206f4968387d377576f8d25b9649863e402bb96b294af6193cc01b68158"], 0x0, 0x0, 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r8) r9 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 09:31:42 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') listen(0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000140)=@default) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000940)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) recvmmsg(r2, 0x0, 0x0, 0x101, 0x0) symlink(0x0, 0x0) 09:31:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 599.133496] binder: 19992:19998 unknown command -54 [ 599.143531] binder: 19992:19998 ioctl c0306201 20000780 returned -22 09:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0xd476a02ffbc76578, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="3232ce2774e7a3", 0x7, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 09:31:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="0fc771013edf3566b8050000000f23d80f21f86635000000c00f23f80f212f66b8000000800f23c00f21f86635020002000f23f8ba4100b007ee66b9800000c00f326635010000000f303e0f01d166b8f00000000f23c00f21f86635010007000f23f836660f38288f6f53", 0x6b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0xd, 0x1, {{0x80, 0x4}}}, 0xfffffffffffffd18) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1, 0x202000) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'s}z'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r3, &(0x7f00000000c0)=""/18, 0x12) keyctl$invalidate(0x15, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:31:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:43 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:45 executing program 5: r0 = getpid() sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr\x00', 0x6011}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) fcntl$dupfd(r10, 0x0, r9) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2000, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0xa000, 0x0) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) fcntl$dupfd(r18, 0x0, r17) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) fcntl$dupfd(r20, 0x0, r19) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) fcntl$dupfd(r22, 0x0, r21) r23 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) r24 = fcntl$dupfd(r23, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r24, 0xae60) ioctl$KVM_CREATE_VCPU(r24, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r24, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r25, 0x284b}}, 0x10) r26 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r26, 0x200004) sendfile(r2, r26, 0x0, 0x80001d00c0d0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r27 = request_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='syz', 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000004c0)="205355286ae201e1d21c413510c7a33fb9f6a1f880c142669f1d2a77df8ba8d51f2b3d375ad661016b3908d8725efa9f750f2e9ebdd24f46f5e8127be114f55fca4abdbeca53aad1c00bd0d05b10258dcfb67258bd278df9a382c0c24cc6430d20774d9e0cabac3499ff3a6fb9c115754c28c8e0263212eff2bb38c65f1750c5236fd27bfc31d77272dd82202f3618bc6e0d20379dcc2f63e9ff9de24012f3cbc9a5795d0f65c34978d2baaee564db248fad19a959b6b757e9adbdb5d32544bcb214c1efb8b77ec51d6e09", 0xcb, r27) keyctl$unlink(0x9, 0x0, r27) 09:31:45 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0xfb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000001c0)={0x8, 0x8, 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000004) listen(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x800) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000280)='trusted.overlay.upper\x00', 0x0, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/if_inet6\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000200)=""/199, 0x200002c7}], 0x1, 0x101) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r5) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00f7000056ed00d4", @ANYRES32=0x0, @ANYRES32=r6], 0x3}, 0x1, 0x0, 0x0, 0x8c000}, 0x40081) 09:31:45 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x60a80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000001c0)={0x100000, 0x0, [0x40, 0x10000, 0xe7, 0x7df0f650, 0x80, 0x8, 0x7, 0x3]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r6}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x2, 0x8001, 0x3, r6}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r8, 0x1, "99"}, &(0x7f0000000180)=0x9) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:46 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) syz_open_dev$ttys(0xc, 0x2, 0x1) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$sock_void(r1, 0x1, 0x32, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) semget$private(0x0, 0x4, 0x0) ptrace$cont(0x1f, 0x0, 0x9, 0x1ff) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 09:31:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:48 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c0200000b6300001063084000000000000000000e630c4000"/36], 0x0, 0x0, 0x0}) 09:31:48 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000540), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1e4, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x2}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x3}}]}, 0x1e4}}, 0x82) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000001600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a5fcfb7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4) write$FUSE_OPEN(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:31:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000fc0)={0x0, {{0xa, 0x0, 0x0, @ipv4}}, {{0xa, 0x0, 0x0, @rand_addr="b70258061b8c477e0a38d40a29045c98"}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="f2f3c4891b0f01014224c41000008b000000006c76db73bdd8cf620eb0085ada4096d90fe2207390a096d4f465c1059a00861a14"], 0x0, 0x13}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_submit(0x0, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) io_submit(0x0, 0x0, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffc], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001300)=[{0x0}]) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'%at\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000d8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff00000000726564697265637400000000f6f678c1bcc95568ee000000000000000000000000000000000000000008000000000000"]}, 0x210) r5 = socket$inet(0x2, 0x3, 0xfd) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'%at\x00', 0x19, 0x1, 0x160, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000d8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000"]}, 0x1d8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@nat={'%at\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x20) ptrace$pokeuser(0x6, r6, 0x200, 0x80000000) [ 605.188617] binder: 20115:20123 unknown command 524 09:31:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:48 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000600)) r3 = dup(r1) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x20) ptrace$peeksig(0x4209, r4, &(0x7f0000000040)={0xfffffffffffff9c1, 0x1, 0xa}, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000000000e630c4000"/23], 0x0, 0x0, 0x0}) 09:31:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 605.213785] binder: 20115:20123 ioctl c0306201 20000780 returned -22 09:31:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) fchdir(r0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = dup(0xffffffffffffffff) getpid() fanotify_init(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r5, 0x0, 0x7fffffa7) 09:31:48 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000002c0)="fd425600b72cc6785ba07c767179a8200017d4b2e1ec2d3e1b0d8e5b7bf75d3d6e211cecf623171bafddf71a3a00549252667eb55c373bcdc7539e66a40f51f08325676be4", 0x45}, {&(0x7f0000000040)="8f49659f677e2879f625ea1906c49894daeed0cc9519464d165944e3657d0a1f5d9736cce3d712f7d9b6e776", 0x2c}, {&(0x7f0000000340)="9a4f5e6251c73d9eed6b38d0d8c4918fd1575d103ce817ca33b901da86d0d80c3ae07d46a4ac3e55da799096aa6334435f79d0089e5eba8f6cbcb4e33be957e9e34b948630e70c309bdc669f9290680cdd4fc98e69596ce20cf2d335c7f42516c9e69c4c08d4cf969a3b5c475399a1a092378ae0d878f90b03faaa3ff58ba167c4e6340dd868ad0b302c8876", 0x8c}, {&(0x7f0000000400)="8396ffc88c122d0331ea13f73ca793e855ad86615d3e96f871b7a8ff0aabb9bd988ba790a86730ff3670e6f42399dcdd27da63069c008d4270330d2bd341c3e44e16c3362afecc955a852b5234d48b2b0351", 0x52}, {&(0x7f0000000480)="047ac2762c9efe990a5c55859a66aed3b8f1f4dd398c88fc1468652826ae0475872f62e8f2732be94ee61b7801b22e696724768e6b5f06", 0x37}, {&(0x7f00000004c0)="3a50bb9d9b7752d50d34ea74c87f0de503cf6f143fce9a03cfb70c9bc54a218fdb7a430d0db037807690a23f012cc527b827168e2968981e22b45b0f4339999531da6e53666aa3f859f3c40f3867b405fe43d74c8d205a293f33c1b5dad385a6c40adb1c42f7d2fd06a1d773465abaecc2a91fd588c38eb06435a67125c3e0349f371d527fcc4358c1fa0d2c26411a607ac72e40c783072ca6f11ebdc400", 0x9e}, {&(0x7f0000000580)="22588a4d5b933b93a3a3ca8791a12365a5f66b4a0ab6fc61f007fb5c2cb4e01bab627988ea112cd3da58c88152ec0052a35ff24a4ea87d22e2764373b17af68994a0a7f5094eaf4f314b5aa975f2388080", 0x51}, {&(0x7f0000000600)="1faf8884f43a58f1e1468521e93f5550940d7776661190c7726029c467e005023bdfd1fd872a105ee185d27e97a95de50b64b44a1dce65dfa8b09e9afbd8da43da940f926e695926788cafb4537675f17b30d6bc0f2094df1cfe2b250231cb64a253bac28dacc6e9bf388d123824559331cc987e1aad514c8437b9ea2384ab25e1558d8c725e8b57824412d6a5f5b45bb8aa9be100110d11b75449407c87e6e1e926b03bcd", 0xa5}, {&(0x7f00000006c0)="ee363f7643adca8ccf58d7c2402c7a04189a9f1be35ae26a25d48d47979d4d097c1d428a298c2a7923726308921c907270fe0764b2ab2b069a18145ebeee4f0429e5d456002ac05089e4a1efd98b764e1e6a388f143b314f5c3a4ee6bf183f7e4352", 0x62}, {&(0x7f00000007c0)="e3dea0a6acf2f9b702662b33a42ad438ac767f4e61a2d2fb9163c59cfe8b2c1634b83c07b5a1482a2629a9683ddb5818fe57319dfd589183aa5662f31015c6c1aadc50cb09f7f884e19542745ea827b505a4de599fa764286f27", 0x5a}], 0xa, 0x0, 0x0, 0x8000}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6300000be300001063084000000000000000fff8630840000002f30cbd4ba3600000000000000000006546acf700ed1aedb5a185d80d7e1b9ad1d3dcad6500376eab012922088d121ccbb7b25c5ae0b9cdf798bcde6e43c03e5143a1633e3d088c09413ed3d352322c6d1e0bce9da95382963b7976af8d2f813dfbbfac3c8c80fb5098f07ad1fbe21a1b4d760d6c55c4c1ba47b6a2cc610576ea140446996e9f27cc20197421511b064a981f6a90f4503c641959c8b77bfee350afdad41fe4dbfeeb69e82b96345f36efc023b74af8120d91a496949cee1f70ae5af49ba353133f29f2099bdebe750e0a43113802d79b2af4d606d3b148e5c86533b14e9d119fc06f5a6050548e56e55174fffba30cdc38c471478c9b024a8cfd403a30d243d8efa10f2ade99e94817b3aeed319176e6264c88aa20f1c617a10baeb520d0ee4f6fbc0a1d5e412728154bf6527043dcc94f0214c7ea0991d1f708b31295c6a9f79d311b3486b4118960a3e4ba44414c517fa857c446ce1e33"], 0x0, 0x0, 0x0}) [ 605.362817] binder: 20138:20139 unknown command 234881024 [ 605.368686] binder: 20138:20139 ioctl c0306201 20000780 returned -22 [ 605.466945] audit: type=1800 audit(1577007108.789:150): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17095 res=0 [ 605.493906] audit: type=1804 audit(1577007108.819:151): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir949378956/syzkaller.I2eKvN/362/file0" dev="sda1" ino=17095 res=1 [ 605.521751] binder: 20150:20155 unknown command 58123 [ 605.527058] binder: 20150:20155 ioctl c0306201 20000780 returned -22 09:31:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$rose(r6, 0x104, 0x2, &(0x7f0000000000)=0xff, 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1800) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x2e2}}, 0x18) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 09:31:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:49 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) fanotify_init(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='loginuid\x00') getpid() r0 = socket$packet(0x11, 0x0, 0x300) dup(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100007657", @ANYBLOB, @ANYRES32=0x0], 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@int=0xffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) process_vm_writev(r5, 0x0, 0x46b, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x23}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec7", 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000002640)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000580)=""/81, 0x51}, 0x9}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000680)}, {0x0}, {0x0}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/17, 0x11}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x100}], 0x3, 0x10022, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 09:31:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:49 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x1c1042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x0, 0x0, 0x0}) sendfile(r1, r0, &(0x7f0000000180)=0x7, 0xffff) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000140), 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 606.186955] bond0: Releasing backup interface bond_slave_1 09:31:49 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 09:31:49 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) write$FUSE_LSEEK(r0, &(0x7f00000006c0)={0x18, 0x0, 0x3, {0x800}}, 0x18) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) fcntl$setstatus(r2, 0x4, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000700)={'veth0\x00', 0x800}) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f0000000140)=""/34, 0x22}], 0x5, 0x40d5) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video35\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c400000002e359c4f000000000000000000"], 0x0, 0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000200), 0x8) r10 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1af) write$FUSE_NOTIFY_DELETE(r10, &(0x7f0000000180)={0x4b, 0x6, 0x0, {0x4, 0x0, 0x22, 0x0, 'vmnet1posix_acl_access\\]eth1cpuset'}}, 0x4b) 09:31:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(0x0, 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 606.308655] audit: type=1400 audit(1577007109.629:152): avc: denied { setattr } for pid=20169 comm="syz-executor.5" name="loginuid" dev="proc" ino=103391 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 606.362661] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:31:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:52 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 09:31:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(0x0, 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:52 executing program 5: syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'vem\x00', 0x8}, 0x18) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x20}, {0x0, 0x2c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{}, 0xa, @in6=@loopback, 0x3500, 0x0, 0x0, 0x7, 0x2}}, 0xe8) fcntl$getown(0xffffffffffffffff, 0x9) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x36, 0x1]}) 09:31:52 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x1c1042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x0, 0x0, 0x0}) sendfile(r1, r0, &(0x7f0000000180)=0x7, 0xffff) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000140), 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:31:52 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e637b1b1e8400"/36], 0x0, 0x0, 0x0}) [ 609.128712] binder: 20220:20227 unknown command 461071118 [ 609.157571] binder: 20220:20227 ioctl c0306201 20000780 returned -22 09:31:52 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 09:31:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(0x0, 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000380)='\x00'/11, 0xb}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100000000) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='children\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@empty, r4}, 0x14) r5 = fcntl$dupfd(r2, 0x0, r1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000100)=0x80000000, 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000000)={0x3, 0x5}) preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 09:31:52 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:52 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/388], 0xfc, 0x1) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:52 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:52 executing program 3: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:52 executing program 4: r0 = open(&(0x7f0000000500)='./bus\x00', 0xbf69f3d2873107e6, 0x16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff83}}], 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$RTC_AIE_ON(r3, 0x7001) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x6, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setxattr$security_smack_transmute(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20080, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_getevents(r5, 0x2, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000004c0)='/dev/bsg\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x12f}]) io_submit(r7, 0x0, &(0x7f0000000280)) r8 = eventfd2(0x9c, 0x800) io_submit(r5, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000000300)="cc6751b6d0b027b32ca2ce315314a1bcd622c6c989497fe33561b639d522bea2107a4cd9425cf3b82c0af82f8fb51eb68e38906025eec2273e31e5ad96c11949b5c24ef37171e1c944aa7c135866db361216a367e572846e5fd6e32dc4725e036cf3a24512e58bb1964b26ce27f67d591bec99550207b45f60ad19868cdba8002b7684411ae32bd5dded37f72a6ee7fdb9db91ac1f19641fcaf13573a2b7506c15be42b75532395c3496ad8263af2a6fbb2038cc649496eb05728ea2f610eff5c9723e4e75b86104ffdc7b", 0xcb, 0x3, 0x0, 0x4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x117, r2, &(0x7f0000000400)="9825e65a9b242b83", 0x8, 0x870, 0x0, 0x1, r8}]) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 09:31:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6erspan0\x00'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r6) r7 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = dup(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) dup3(r9, r0, 0x100000) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r10 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x4402) ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e85411, &(0x7f0000000380)=""/204) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:52 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r4}, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001b00)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r8}, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1b0002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3eb1ec092471e83144e4a3288abe73140dfbe3eff8f2e93f736d9dd558b891f", 0x57}, {&(0x7f0000000580)="c48f0032207820831bf53ab5c35723d409d0a6cbe1e3b4fbdf3f23d884ea651ed425e935647f8b84851afad79f1e6359f54808dd4e20efd4b90112fd692c9b650964b671cdcea4b8b1859b896e2dad7a98dc2e40728787fedd23c000397df4c79749a2fb93beff0963be63df2a286201ae5a51a5243e1b6175e2659b4984210358cdc89524ec1fd1bc5e17858f5f485d56de4e0f690609012a5a0f68c184814575e53af720fffa1b39aaa33a00ea1a6eb0af57cd5bad2b10cc6b32cf864727e784dbacc37509aad5156d382c250a58f7", 0xd0}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730ad0f3d41d959d78e2c8", 0x24}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000500)}, {&(0x7f0000000940)="22a43b7370eb36363e7259e7d33e3473708c427041e02e01193bc65a5aa1702790f297ef14e5cd75e75b2f4152c80f6a1ce13c942661d93be3638db2b8a9ce19b65ab31f89f89548f2a7c30b586466e17107d137bdc065eb74f8d8794d47e69b4775a9cee66149077a61c312a87356258a52e96dc550696d2668fb2a9b255195466117ac193bde588ac3c7faad1b69fb399b6673e29c46f3a3cf94978f003c", 0x9f}, {&(0x7f0000000a40)="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", 0x1000}], 0x9}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002000)}, {&(0x7f0000002100)="9ded0933fadacbada31ad7b75482074167847b16d8ccdde9b9012cb97c10a85ff942c8f98c1d075f7d5a3367a81d5afc07e162b62f982ed1e7a362", 0x3b}, {&(0x7f0000002180)="6209ed67941216fdf598146857a68b5a81019042838b95e9512b2b0641e40e569df37b073c12353fc2b9014cb0a30d5830", 0x31}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="f9165e81a2dc00f49dbb0029"], 0xc}}, {{&(0x7f0000002280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002400)=[{&(0x7f00000022c0)="247badb355c651b14744280a13c3b8ffcb44beacbfe5f126189e667bcf69a0bc7cb25e2358332fb486915eec8cce7775876b447a45deb35e5b3f8c346e1b008cd8f583159970ca105cd1389d417e87c3383a2b893230e3635eb35502a705832a2d60d7a39dbac94ecca5ffd0da556dcef4ba376eb09519ad2820a60ff79f8a661d", 0x81}, {&(0x7f00000023c0)}], 0x2}}], 0x3, 0x14006081) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_delneigh={0x64, 0x1d, 0xe02, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x10, 0x1d, 0x1}, [@NDA_IFINDEX={0x8, 0x8, r8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_VNI={0x8, 0x7, 0xf2}, @NDA_LLADDR={0xc, 0x2, @local}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_DST_MAC={0xc, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000001}, 0x10) 09:31:53 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:53 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006300000b1df7206c8fa5ce2fdb19dd83400000a0cc9cb59c000000000000536dfe74763b6aea68be2dc8d1f6ec293000b3e08f3e560efe25ab4f19bc2b26615f56d6a546f470cc1db652c122a27b33bda221849f1e62a6d9fc92072951d7b9077e2e0f7b5fa959bdbfb82990d31894231cbc3f16131d130ae97b0e7d790be2ed33f5d8effdfbb9d95cd2946cec42e7ac7dc066e62174ab3877df1f"], 0x0, 0x0, 0x0}) 09:31:53 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:53 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xb8800, 0x0) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x3f, 0x9, 0x1, 0x22}, 0x6) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xfe63, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) [ 609.738590] binder: 20293:20295 unknown command 25344 [ 609.745713] binder: 20293:20295 ioctl c0306201 20000780 returned -22 09:31:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 609.828324] binder: 20303:20306 unknown command 0 09:31:53 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="000800000000000002004e217f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e20ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020036230000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000200"/528], 0x210) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 609.855532] binder: 20303:20306 ioctl c0306201 20000780 returned -22 09:31:53 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:53 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "da9b2bbd4473d4dbd7b4b0d7b2b2dfa21c04ee3c"}, 0x15, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c63001063084000000000000000000e630c40000000001200000000000000"], 0x0, 0x0, 0x0}) [ 610.068948] binder: 20321:20322 unknown command 268460812 [ 610.095804] binder: 20321:20322 ioctl c0306201 20000780 returned -22 09:31:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) [ 610.618630] audit: type=1804 audit(1577007113.939:153): pid=20331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/241/bus" dev="sda1" ino=17113 res=1 [ 610.837160] audit: type=1804 audit(1577007114.159:154): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/241/bus" dev="sda1" ino=17113 res=1 09:31:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) lookup_dcookie(0x100000001, &(0x7f0000000140)=""/68, 0x44) ptrace(0x4208, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmget(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:55 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x9, 0x6}, 0x493514babfcc0eb6, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) getpid() getrandom(0x0, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000240)={0x7}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x2) 09:31:55 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet_sctp(0x2, 0x4, 0x84) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x5, 0x1f}]}, 0xc, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000280)="6a5d361664bb812058c59954776a6e8b65395c92e4554ad0bc60ad73401ae9ab66ff8f04e7a49c361bfa30c9a6f492dd388a15d724bf4512d24e29413e1eae8f1fb8db24f3eb52c877126aff1c304b8599675e55c14458e66f52b55425d97cb823dc057bc92fb5c28f8f163e3514bf02064dc48e478969894a1c2fd38f128665658227913f5542eafcd242ed0cfb6f2caf3e19ecc188da", 0x97) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @mcast2, 0x3ff}], 0x1c) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x100, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'bond_slave_1\x00', 0x400}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000200)={0x8, 'batadv0\x00', {'rose0\x00'}, 0x101}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 09:31:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) creat(0x0, 0x0) unshare(0x20070200) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 09:31:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/527], 0x15) write$P9_RAUTH(r5, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x5}}, 0x14) write$P9_RGETATTR(r5, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 09:31:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 612.771102] binder: 20339:20358 unknown command 1073741824 [ 612.780768] binder: 20339:20358 ioctl c0306201 20000780 returned -22 09:31:56 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r7, 0x0) fanotify_mark(r2, 0x12, 0x8000038, r1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r14, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r14, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast1}, &(0x7f0000000040)=0x123) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000080)={r15, 0x1, 0x6, @dev={[], 0xb}}, 0x10) 09:31:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x8, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000140)=""/68, 0x44}], 0x4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:59 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x88040, 0x0) accept4$x25(r2, 0x0, &(0x7f0000000500), 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x2b9, &(0x7f0000000480), 0x2, 0x0, 0x331}}], 0x1, 0x40, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0xf, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)) r7 = open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr(r8, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000300)='&\xb1.\x00', 0x4, 0x2) preadv(0xffffffffffffffff, 0x0, 0xfffffffffffffeb2, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x7f) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xbbc94a58dde7c9, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x48110, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000180)={0x1f, 0xa7e, 0x1, 0x0, 0x47, "b6f134b115d33927ff51527c0c6ef746f0f068", 0x5, 0x80000000}) sendfile(r9, r10, 0x0, 0x1) 09:31:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x20) r7 = getpgrp(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r13) chown(&(0x7f0000000380)='./control\x00', r11, r13) r14 = gettid() tkill(r14, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r16, 0x0) r17 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r17, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r17, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r19, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r20) chown(&(0x7f0000000380)='./control\x00', r18, r20) r21 = gettid() ptrace$setopts(0x4206, r21, 0x0, 0x0) tkill(r21, 0x20) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r23 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r23, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r23, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) r25 = fcntl$dupfd(r24, 0x0, r22) ioctl$KVM_CREATE_IRQCHIP(r25, 0xae60) ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) ioctl$NS_GET_OWNER_UID(r25, 0xb704, &(0x7f0000000200)=0x0) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r28 = socket$pppoe(0x18, 0x1, 0x0) r29 = socket$unix(0x1, 0x1, 0x0) bind$unix(r29, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r29) r30 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r29}, 0x2c, {'wfdno', 0x3d, r30}}) r31 = socket$unix(0x1, 0x1, 0x0) bind$unix(r31, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r31) r32 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r31}, 0x2c, {'wfdno', 0x3d, r32}}) r33 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r34 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r36, 0x0) r37 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r37, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r37, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r39 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r39, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r40) chown(&(0x7f0000000380)='./control\x00', r38, r40) r41 = socket$unix(0x1, 0x1, 0x0) bind$unix(r41, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r41) r42 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r41}, 0x2c, {'wfdno', 0x3d, r42}}) r43 = epoll_create1(0x0) r44 = gettid() ptrace$setopts(0x4206, r44, 0x0, 0x0) tkill(r44, 0x20) r45 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r45, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r45, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r47, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r48) chown(&(0x7f0000000380)='./control\x00', r46, r48) r49 = socket$unix(0x1, 0x1, 0x0) bind$unix(r49, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r49) r50 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r49}, 0x2c, {'wfdno', 0x3d, r50}}) r51 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r51, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r52 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r52, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r53 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r53, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r54 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r54, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r55 = socket$unix(0x1, 0x1, 0x0) bind$unix(r55, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r55) r56 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r55}, 0x2c, {'wfdno', 0x3d, r56}}) r57 = socket$unix(0x1, 0x1, 0x0) bind$unix(r57, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r57) r58 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r57}, 0x2c, {'wfdno', 0x3d, r58}}) r59 = socket$unix(0x1, 0x1, 0x0) bind$unix(r59, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r59) r60 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r59}, 0x2c, {'wfdno', 0x3d, r60}}) r61 = socket$unix(0x1, 0x1, 0x0) bind$unix(r61, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r61) r62 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r61}, 0x2c, {'wfdno', 0x3d, r62}}) r63 = gettid() ptrace$setopts(0x4206, r63, 0x0, 0x0) tkill(r63, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r64, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r65, 0x0) r66 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r66, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r66, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r68 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r68, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r69) chown(&(0x7f0000000380)='./control\x00', r67, r69) r70 = socket$unix(0x1, 0x1, 0x0) bind$unix(r70, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r70) r71 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r70}, 0x2c, {'wfdno', 0x3d, r71}}) r72 = socket$unix(0x1, 0x1, 0x0) bind$unix(r72, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r72) r73 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r72}, 0x2c, {'wfdno', 0x3d, r73}}) r74 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002600)='/dev/nvme-fabrics\x00', 0x20000, 0x0) r75 = socket$unix(0x1, 0x1, 0x0) bind$unix(r75, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r75) r76 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r75}, 0x2c, {'wfdno', 0x3d, r76}}) r77 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r77, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r78 = socket$unix(0x1, 0x1, 0x0) bind$unix(r78, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r78) r79 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r78}, 0x2c, {'wfdno', 0x3d, r79}}) r80 = getpid() getresuid(&(0x7f0000002640)=0x0, &(0x7f0000002680), &(0x7f00000026c0)) getresgid(&(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)=0x0) r83 = socket$unix(0x1, 0x1, 0x0) bind$unix(r83, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r83) r84 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r83}, 0x2c, {'wfdno', 0x3d, r84}}) r85 = gettid() ptrace$setopts(0x4206, r85, 0x0, 0x0) tkill(r85, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r87 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r87, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r87, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r89 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r89, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r90) chown(&(0x7f0000000380)='./control\x00', r88, r90) r91 = socket$unix(0x1, 0x1, 0x0) bind$unix(r91, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r91) r92 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r91}, 0x2c, {'wfdno', 0x3d, r92}}) r93 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r93, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r94 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r94, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r94, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r95 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r96 = ioctl$KVM_CREATE_VM(r95, 0xae01, 0x0) r97 = fcntl$dupfd(r96, 0x0, r95) ioctl$KVM_CREATE_IRQCHIP(r97, 0xae60) ioctl$KVM_CREATE_VCPU(r97, 0xae41, 0x0) ioctl$VIDIOC_QBUF(r94, 0xc058560f, &(0x7f0000002f40)={0x7, 0x7, 0x4, 0x40000000, {0x77359400}, {0x2, 0x9b2385a492f64eed, 0x7, 0x42, 0x3, 0x7, "71701050"}, 0x73e, 0x2, @fd=r97, 0x4}) r99 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r99, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r100 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r100, &(0x7f0000002380)=ANY=[@ANYBLOB="10000000daffff000000000000000020a559691539750d0739f8b7c85204293f0cf79d72fd499d9b071fd2aaa6fd6efac308d8aeb2ac8ddbf0b2936b994d2d71e10db62acfd41931b8b2f4d71a838941294453053ae26f673db771efeb650afe6c17c3fa4e9a8b252fcc9a65c8175a91eff9301db7b01f4384202c0ae90d88800c"], 0x10) sendmmsg$unix(r4, &(0x7f0000004240)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="6919324225b58b11a2be94f11eecec1a74989f62e3069e6ce379a97ede3a199493fd388fbff90c11449290f88b6d2322cc915c4b8d3cca8787089ef239fb2dee0f6989f217634fd193208eda3f2b71b244ea88dbe69dd6240325a61302b3d4e34e39c98131b491fe673e79338c9a2265eb20ad6190", 0x75}, {&(0x7f00000007c0)="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", 0x1000}], 0x2, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r26, r27}}}], 0x60}, {&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000400)="a1e95297aca2d4e6295c30032c2be17cc30f166449b4cd017e20e3c3c88a97c678482b7accf8c9b675c0fc6dd4d1edfd2e321bdb7880891db71d7d0a9f7d64dc54b159b71dc4725e92da6a0eeda0a22d6700e2bac61e72dadadf2d21bbfb9dee95359b5d694a0a854b88cdde85f380d9612cd8377e26b69cf47687ce0dd5bf1829f2029b3a2d56a4413bd4e7053ddbe19f04627f6e688fbbb0b16a6dce227b6268", 0xa1}, {&(0x7f00000004c0)="4a6ae64fde29b56385959173665c443cc4084b0ea8a0c4e9a876e2b87e0fe00479c3816bbed9ca5b724f0774dbd6ee0e0a029b2cb64bc8567b353230bef832db4cf73c3fb393bdd3b9dc09", 0x4b}, {&(0x7f0000000540)="497555626daa97864d9e2567d9a9bc48cf932590fe03790ff2bff9a22aee616d68cae34b8fe2f36c2d8609d8f75b825e9619b3e3bf04646dae77d3b4cb9318b525b0f2fd34a2c7e6ae40d164c45a677abe2fc8558348201fb2febfc797154254241cdf91f4b729988222efbe46fc99f0d630e166c6716318be96e4cbbdaa331c9f0afa3493fa448e3e76c449d602a43d45d03902b39d97a3df74909cc5dfbc134c8da77dce8aead5dd122774b3baff4743aeedb48b8e1d060bf5dd6c324824968288f7640c1f88dcd29b220daa0236f271fe012fc994c72d18eb9f3b6e056d2e16d371b3d558f6b3bce2", 0xea}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f00000017c0)="5398f86fc95000c8581694cb9ac21fb72c9bb719171e1b76a8afee69bdf561056173886838da5fc56480893aac3c6bddc38bd8e084a39201361f387e977698a0b121116b48c11ec852f58a66529be3fc19fd47088f9241f89a168cf31b33", 0x5e}, {&(0x7f0000001840)="d6bc58f45da22854be17fe03a3146419e74ce2ee6ae7589b7697de9faa6bec0131b79d5380db2a7daf3d9e15712a2a3dcaa7685fcf1c4e976a8941dfa588442cbd68a2ca0803a3b3ccb240beaf3bec0faaeb190f88693767b2ef6981cc770c0cae7ff3efe113d30b3f8a6e136d468a0abb6eb532aafb46d205fae877d289f9c63c0c9112e37094d1f27e2ce10c92ad258ee41dcaef1f67fd2ee6e5cd7fa164a58b4974de63f2d8566361eac38bc1873d10ab44fd71cecf5242ec72dec236d3712ce3fac804d3a605c6b5fa5e9b62", 0xce}, {&(0x7f0000001940)="090af0303f6be4ec5d5bd6cf4a15e0f97d4ade86d25b96fe4c516a36b207a61e50273eba75f32149a846482fe6dfafd094f7bb767f3f359966b432a4323b3c65c24d4dd3714489d908ced350f338e1b6302a6ca5925ef0562466005da20fed8c76fff89a6711db19a766320a164d9b574a2fa6bc3d7c90c12f413d5c44a00953d6784eb61d0e", 0x86}, {&(0x7f0000001a00)="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", 0xfd}], 0x8, &(0x7f0000001b80)=[@rights={{0x28, 0x1, 0x1, [r28, r29, r0, r3, r31, r33]}}, @cred={{0x1c, 0x1, 0x2, {r34, r36, r40}}}, @rights={{0x18, 0x1, 0x1, [r42, r43]}}, @cred={{0x1c, 0x1, 0x2, {r44, 0x0, r48}}}, @rights={{0x2c, 0x1, 0x1, [r50, r51, r52, r0, r53, r54, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r55]}}], 0xc8}, {&(0x7f0000001c80)=@abs={0x2, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001d00)="06994583915fb6dfaf9fc1a62db1b7a278fe2c62af29", 0x16}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000001d80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001e00)="a421ac02a851adb3f5231b4e97508d85a87dcd653d36b853c84dce9475472766371b5917410af3ed33a503757c3e3f49776aad13c4f3416940f4508f3350f52f8688c53e110c5f46e7e2af79adea88b41ac150707f58b10a6762e9c110ea7478c26cac7e1f563698864d0cc19394310e00b313f02972edc5d5d5d434873b3b84bef78ab87e2174499e7529fc76cd9807c86fb2b53bf0b8be377f283b26e5ac6383712a7440b5fabef10159144428a0dfa48060d77fcadf668db22dde8b9007470e877ff28554acf6d6115f9ab3baabae64e4822059ee029bb8d8bc62c16024dc3b1571067e5fc0dfb7cfd568f05fb57f1fa0c6eb51c981f024", 0xf9}, {&(0x7f0000001f00)="9c5f91004c99ba612a5e6a354d092f252c7cf9ca6f2c885bc59b3e14e14f80c81a42ead5d1dacc6882f89c8425add2e00a3a092b90ed0d01f5de0dbd1f57e1d38d8339f75aa6524476452f3d645f56e99d1b2d7feac475cfde9014cae2739449157acc9b718a29fafebacb836776a259b614d7ad5b15cc91e2d250c62c912d18852b50e4d1fdf8424c2afa29c345210f922912f1b20f1e4a415ef20bfef5fef9e4931eb0997994ac8400059091e75c43dda88723370daa78ee322a0e0cf62e4982e30b4ba5580c0799503d718723be4531288d1a3b3639db64490369f96c3d6f6ee6b8438799609c90c05b5e6f708a5a9d7f", 0xf2}, {&(0x7f0000002000)="0595e0724ce59d44098da9f8a5aa76b71a9d05b49b0a7b527b0e", 0x1a}, {&(0x7f0000002040)="17ab6da601c28d56a736321a677488fe2a2ac9bc438ef40b1ecf73982f2f68dce81887897c4567af5a4bae", 0x2b}, {&(0x7f0000002080)="272c1dbe872d5376e671fb66c4f819039dcda83dbee4ff56b10b9a99cf26ec1cb16115d2a196c61e208b4309eefec22b99a20074193fef6731b70d94d0360a18a0de7b0fc9b52c0e9bd5bf846c3006a957c475c84e7f10bd358e943b1d14d554608858997a774d3057a0a5d9edae6fabe46d483971e9ea1404350b6cf37ba96c2d51204990e48bcacf24cab15b18b7c1deb4f10cfeb8483679861613465c5845806cac4b12c5eeb8fdd892a1df2368b33d07ee80b23a4e9c8c497f92de98acb0404ae299df4479d5956c0ad69f9e1ed2d298844ff617f11dd09301982d", 0xdd}, {&(0x7f0000002180)="4a14732633ec9886163a4d7d4891b51b2f33ac8e0e4cdc9d7df7a6d6a830faf18f8cb8232ef890fba4278f121a8364733cddab3c5f4d18a5406862206252eab6622fcdf4d778462ab41c40e8a3ff4b1899aa2b85ff29f28cb95ea025596ec6dc6d8478d14ee6a7725fce3c3241a2171452aa090bfdd6b621eca993dfdc4d04942d90bcd06ea0c3870264ccf99b74fd72708d07435df0462bc1", 0x99}, {&(0x7f0000002240)="4d81f78426b009bac49be4e9ced0b872e395d4608105ff7c5e5c756d9d20eaf74288313ced2f98c309f6fb956073b0d958686bea6f935e5f5a30102f16f0e49096dd1c4d475cb787fa47e6d29d92da117a3adb8a59c76d1aa68abd6807c07b17cdcde8a1b5dde32aa8031e8a6e0e0489bcebc48ac1d82fae5c6cc8fccf1aa347e985012401e776", 0x87}], 0x7, &(0x7f00000027c0)=[@rights={{0x14, 0x1, 0x1, [r57]}}, @rights={{0x20, 0x1, 0x1, [r60, r1, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r61, r2]}}, @cred={{0x1c, 0x1, 0x2, {r63, r65, r69}}}, @rights={{0x30, 0x1, 0x1, [r71, r1, r72, r74, r75, r77, r78, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r80, r81, r82}}}, @rights={{0x18, 0x1, 0x1, [r2, r83]}}], 0xd8, 0x40}, {&(0x7f00000028c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002940)}, {&(0x7f0000002980)="777a1bfaae2c6369601a1993db7e134dc16bb02fc4abafe100220b66e6d60d56378f42b237ed92ea29c5872f7591c2b09846c7038acfa039fca6905722c099b4a9af22676cd22d67dc4f9467bf45115c639880cd8bfe1c54620a0d189b7e94f4f551188a7124803dddbae40310bcbdfb979ae25033", 0x75}, {&(0x7f0000002a00)="15af566a84881d08b99cd70dc50845de6ff224e3eef7a85f6688d02b219ffbf914557fef5f27cf2af57eb2ef3a2e7f0525524d69b7db855e7638b88ba1e6ee91db911812ef602cd7bc5295831877e469d62a498f5f136e03d72cb904c2235527f59256ad6dbf434b98734ede110cf50f7e8511", 0x73}, {&(0x7f0000002a80)="14d1c79912b8eb15c971792fa7052e4c1bebbc7610cf4cda2eeb63e14599c385c7b9c2dc65e0c88840e6f806cabe36396bffd7b9141f0685618b4133fc7ef228e4694fe8667e88a749f10bac40afeed139e8ebcf8a2b24bda07a1405b80a36f6fbdaf90f07cde1c71b6fcca923be4df5eeaa8a197605090c9efb341deb03773e41fb3e1dfd0f270fd96da32e951240f25ce2bcbb", 0x94}, {&(0x7f0000002b40)="47d5c18847c9007d5022cf69a1b4b0d65f898d07ad026ac39ca27c82c5a966da7c15fb918f87834324dee4da4ae41571f98dbb4ad89d84ee022d4ce42e3eca6b6b2a03fa278168daf1f95e978c89883772c49180b018f29f0272bbd6f79680d4448f141ca05a8627bc23c2b0480784afcfea9b918d410787f918ca17b4321e4112b6899b677ceea93698ba6ab6889c854907442642dee37ce0112c7e3738836b73f5b72bfc893d3b3977c7bd328aaf1e1f70db7b8103022901665f1d126f597fdf", 0xc1}, {&(0x7f0000002c40)="69f33421d255cf0492ee45d3eb0ae0a89008c1ec426c7255140ab5f944307c8ae53cff3d6143b0153a483bb1b8ee9e1e3f84d2d98594798b81cf34fcb9f903332a5e0ba303a3f52884bf8e3e6281d267199fecc11704cc7f8b08218204c765dd9b15c2afd4f9051402923464f7d178069ea72301d818d435f2d55639f2366b752edcad41abfec4e7c67f72273bdf3fb3509206f1f8f9b2fb6e9a4e907c513483a49306e94861d943a723b81fd03ea36a9b90baaef6e61941623841b32ed40feedef7f9e20d588e02cf3fd40530a3921ab37a", 0xd2}, {&(0x7f0000002d40)="0d540d003aa01469b2dd6f70d13ef6ebe4e958383cfba6c19bea4981a9f6fc7f85103a0c109cbc142fee618d7a5c963dd32ef830ca5b6f48506ac17a6f21803cbd124614613a1f01d76dc2ee2acc47b4fb2f4fbbf4d33e3a2b298254a47338a9601b6a2a5a4fc0124430d21abe76fabdefe462f20058dc46aa04b074da4cdddcec8ec4b3b0e34bdfdc95d82024d5e2bcf2fedc8658e9e89d73930e005a62b79e7e831f8b089c4103f30595f2a11f6143d457f23301fc651360da990a401da09e8dba80eb3541b9fcfd68877d510f5614c76254b01f70", 0xd6}], 0x7, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r85, r86, r90}}}, @rights={{0x28, 0x1, 0x1, [r91, r93, 0xffffffffffffffff, r98, r99, r100]}}], 0x48}, {&(0x7f0000003040)=@abs={0x3, 0x0, 0x4e22}, 0x6e, &(0x7f0000004200)=[{&(0x7f00000030c0)="b4819aa565c8accf26f255e758e72b2d58d4bc6bfd038a15f38ff617cb94c515acb228766bef1ff9f3905d8ae4bfd6cba1bcc7dba913fd243cd0238220ca8bdbfb660f35c107ea2acbc35c3a0f2cf969f3eb136d97a08f36d96a6489e605abf6dda2607eca260aa89ec6a07fe0b47c4a90", 0x71}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="66f1f329a4e8e414c95461e483291c2267ead3d0ba9282752dc5e128345c7f9898e226f87c1865641a0f357334c023c63363c32987fb577ad37cae63c64d8f2e2984bd3d338966fd5cafaa9b1c375b9e99300ac258b74213cb98eda8dd771eb35800e25b93589bc31b88f60c4cc8f8a7bc173973cb8ce9b7f0d17b84927ddaaf543d9bacb2c37d02825f7d2e1ab77a188f3620b8657041fed644dc223314cbfb24cce0249311aac2f3b6b9d65708758f7d4fbf", 0xb3}], 0x3, 0x0, 0x0, 0x40c1}], 0x6, 0x30010010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000040)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:31:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="66696c74657200000000000000000000080000000000000000000000000000000e0000000400000078030000a001000000000000d000000000000000a0010000a8020000a8020000a8020000a80200f4a702000004000000", @ANYPTR, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000700000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000ff000000000000000069726c616e300000000000000000000065727370616e300000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b0000ff030000000000fcffffffffffffff0000000000000000fe80000000000000000000000000001e000001fe000000ff000000ff7fffff004e204e204e204e220500000000800000070000006f07000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xa808) 09:31:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:59 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000100), 0x4) 09:31:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000), 0xb) clock_gettime(0x7, &(0x7f0000000300)) utimensat(r3, &(0x7f00000002c0)='./file0//ile0\x00', 0x0, 0x100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x200300, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket(0x400000000000010, 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @null, r7}) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, 0x0) 09:31:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/95, 0x5f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000daffffbf0000020000000000"], 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000000)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) tkill(r5, 0x3c) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x2, 0xabe, 0x2002, 0x6, 0x8, 0x3, 0x2}}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) 09:31:59 executing program 4: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x1ba, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x48570a556ba3f538, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000480)={0x749c, 0x2, 0x0, 0x3f}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x200000804, 0xffffffffffffffff, 0x8001, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x100082) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) dup2(0xffffffffffffffff, r8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r9, r10, 0x0, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000500)=0x6e) 09:31:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:31:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) tkill(r3, 0x30) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 615.926326] ptrace attach of "/root/syz-executor.0"[20431] was attempted by "/root/syz-executor.0"[20433] 09:31:59 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40000000400203) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c40000000000000000000000080"], 0x0, 0x0, 0x0}) 09:31:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x100000000000000a, 0x0, 0x89}, 0x40042) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfe79, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) 09:31:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x2000000000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c1e40000", @ANYRES16=r9, @ANYBLOB="0305000000000000000008000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x40203}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x2c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x1c, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}], @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', r10}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf7, r11, 0x1, 0x3}, 0x14) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000000)) r12 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:31:59 executing program 4: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x1ba, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x48570a556ba3f538, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000480)={0x749c, 0x2, 0x0, 0x3f}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x200000804, 0xffffffffffffffff, 0x8001, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x100082) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) dup2(0xffffffffffffffff, r8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r9, r10, 0x0, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000500)=0x6e) 09:31:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:31:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, &(0x7f00000000c0)=0x7fff, r3, &(0x7f0000000100)=0x1, 0x80000000, 0x8) fadvise64(r1, 0x100, 0x8, 0x3) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 09:32:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x80}}) 09:32:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 616.746606] IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready [ 616.775410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.786619] bond4: The slave device specified does not support setting the MAC address 09:32:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2, 0x0) creat(0x0, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 09:32:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000380)=""/230) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x6300, r3, 0x0, 0x0) tkill(r3, 0x20) process_vm_writev(r2, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0xc63) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)=""/17, &(0x7f0000000180)=0x11) 09:32:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:00 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d0000000600000000000000000000000400000000000000000000000000000014e5ffffff00000065746830706f7369785f61636c5f61636365737300813f561ca7fdd9764be561ae0e6bed92d9c1a4158faea3b6f64ab8c56436382d4b734dfd81700434951cbe79906a931e2b8f5b76ae9f7313a5da1b39563e6ec3273b2d9cca608704b5bf07f3d264ae47157dc7281c0b67b47debb9d91343f0a540aad0c5b3532e408e0834388f09e31b9a30f44b"], 0x3d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r4, 0x0, 0x80000003) 09:32:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:00 executing program 4: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='\t'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x802) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'q\x01\x00ue1\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1090040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40114}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 09:32:00 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4) 09:32:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/217, 0xd9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/181, 0xb5}, {0x0}], 0x100000000000000b}, 0x2) shutdown(r1, 0x0) 09:32:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:00 executing program 2: getpid() memfd_create(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x563201, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_open_dev$amidi(0x0, 0x9c4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) gettid() memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) getpriority(0x2, 0x0) 09:32:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa020200) unshare(0x8000400) 09:32:00 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x808}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={0x20}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) 09:32:03 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0xa0c01) write$sndseq(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000fe3000)) 09:32:03 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1000006a1, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000500)=""/69, 0x45}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000000)="44afd0edcb9190f69a475dd7ba2de92a0ed6846c9ca9dcc8ff2c3a10aa81ad48aa4926cf4236d3675441f00a2b963dfcce935829a806262cab2b54fa51e2d2306572af71c422624172cf62ea51ddd96ac104074e4ab744f20c30ad6670f67ffec94763de543fbca542ae0f7d23b56383e9d4799a5ff3e9d5d664b5e5274afe17c1275ad69a1d4e8f32d94657418d62efda2d557f617e538d7b370c784c10", 0x800e2}], 0x7) shutdown(r4, 0x0) shutdown(r1, 0x0) 09:32:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x6, 0x0) 09:32:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getdents64(r1, &(0x7f0000000280)=""/95, 0xfffffffffffffc94) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20a02, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x20) sched_getscheduler(r4) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 09:32:03 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(0x0, 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:03 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) shmget(0x2, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6300000b630bd71d8317cd904700001063084000000000000000000e630c4000"/44], 0x0, 0x0, 0x0}) 09:32:03 executing program 5: gettid() r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100003) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/raw\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) socket(0x0, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x200) [ 619.987275] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.019777] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 09:32:03 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0xb) clock_gettime(0x7, &(0x7f0000000300)) utimensat(r2, &(0x7f00000002c0)='./file0//ile0\x00', 0x0, 0x100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) connect$unix(r4, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x200300, 0x0) socket(0x400000000000010, 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @null, r6}) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, 0x0) 09:32:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 620.065411] binder: 20581:20585 unknown command -687119605 09:32:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00r\xe5\x1a\x8f+\xd2A&V\xccd\xd8e\xf3\xb0\xbd\xc7\x16\xde\xfb*\xe1\xfc\xc2\xd8f\xd4\x80\xdf\xec\x8b\xa4\x8dc\x1c\xd5\x95\xa2\xaeN\x8a\x86\'\xb0\x03\xd8\xfd0\xcc\xba\x92(\x9f\xac\x9d\xd5|\xa6\xaf\x13\x9f0\xd8{\x9c\xf7\xa7\xf0F\xbc\xcc\x16\xdd\xf4\xcd\xa3\x9d\x99\xcc\x9f\xf3\xfb0-\xe9q{\x952\xdc\x98\xa6\v\xcc\xbfaf\xa4\xfd\x8d\x13\xafT\xc6f\x00HL') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040)=0x8f, 0x10000007) [ 620.108291] binder: 20581:20585 ioctl c0306201 20000780 returned -22 09:32:03 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x1) dup(r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:03 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) rt_sigsuspend(&(0x7f0000000040), 0x8) socket$nl_generic(0x10, 0x3, 0x10) 09:32:03 executing program 4: getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2b5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x54, 0x0, 0x400, 0x0, 0x1}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000002c0), 0x0}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) 09:32:03 executing program 2: 09:32:03 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x7b1a9f09d2c2fd12) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @reserved="461ded1601e206be7e8893b5b9583563660f0069e91fecd2d224263dde1e8c13"}}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2210091, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [{@obj_user={'obj_user', 0x3d, '&,'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, 'GPLtrusted($systemvboxnet1'}}]}}) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) 09:32:03 executing program 2: 09:32:04 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(0x0, 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:04 executing program 2: 09:32:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)=""/73, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffff81, 0x0, 0x0, 0x800e00729) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) shutdown(r2, 0x0) 09:32:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfcf9, 0x0, 0x0}) [ 620.817701] audit: type=1400 audit(1577007124.139:155): avc: denied { map } for pid=20649 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=16065 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 09:32:06 executing program 5: 09:32:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7c", 0x64}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000000)='$\xbbeth0nodev*\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 09:32:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r13) chown(&(0x7f0000000380)='./control\x00', r11, r13) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, r4, 0x0, 0x14, &(0x7f00000006c0)='&securityvboxnet0--\x00', 0xffffffffffffffff}, 0x30) r15 = geteuid() r16 = socket$unix(0x1, 0x1, 0x0) bind$unix(r16, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r16) r17 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r17}}) fstat(r17, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r19, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r20 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/btrfs-control\x00', 0x4800, 0x0) r21 = socket$unix(0x1, 0x1, 0x0) bind$unix(r21, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r21) r22 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r21}, 0x2c, {'wfdno', 0x3d, r22}}) r23 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r23, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r24 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r24, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_FIOGETOWN(r24, 0x8903, &(0x7f0000002940)=0x0) fstat(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getgid() r28 = gettid() ptrace$setopts(0x4206, r28, 0x0, 0x0) tkill(r28, 0x20) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000002a00)=0x0) r30 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r30, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r30, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r32, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r33) chown(&(0x7f0000000380)='./control\x00', r31, r33) r34 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r34, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r35 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r35, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r36 = socket$unix(0x1, 0x1, 0x0) bind$unix(r36, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r36) r37 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r36}, 0x2c, {'wfdno', 0x3d, r37}}) r38 = gettid() ptrace$setopts(0x4206, r38, 0x0, 0x0) tkill(r38, 0x20) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002d00)=0x0, &(0x7f0000002d40), &(0x7f0000002d80)) r41 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r41, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCGPGRP(r41, 0x8904, &(0x7f0000002dc0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e00)={0x0, 0x0, 0x0}, &(0x7f0000002e40)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000140)="88d221ae5e109a1363b9710e900132ebbfc05bc0fa02c61bf96f1db07f7e8a8fd83496afed3a5da7dec25c21c7109efd65f16c294bc5e9fbfb3462a8a32df9613c1f300a9c8b170a7544c4c4ba22adf110ef02388258fc70e8f78b17cc9bdce6c50bdd37aec196e9ccc072343ed1ab2e20ffb302e8d33ea729df94f89c303a45fed59a9ac0b953c549d75e9ea31ceda08ff59183572153c920b5b8237298af0349f8b577b600d3860ee53cbeef83bf442552db547550b742c3fee285b2b10bb29fa67282fdaab7cab8aca82af0725a5ff89415de9cc48086bd7f8c86a80587feaf2914e14b107ccd32d0ab2c491e61e22ce163", 0xf3}, {&(0x7f0000000240)="1edf6a836eb0c29e299a83ac1fa98c415d0c14d46bbb96636f3a70a5b4956aa7f68499a1430d2e677f15782ab8d00c2c034805b536f481ab41272aa11c62b54680b614e956cccd1b1eb88dfab5fa50da3289969c246e9299cd190ffe60b4c2a2748870abba1de3f4ecb8e929bc26b3aec2d6c2faefde4d8b91fd5f394cc9f52768918c38ec2f79e2e3a1b330d9584aee86094b84652e8e1dc48ad779d380bdeb8fdc0b2211192296d71220b1", 0xac}, {&(0x7f0000000300)="d6e028143d83360ba22dd793b4732fe08560a6b771ba4171deee91146433d96655eac73ced6d1b40e6d4212d44bdb5c5b975a798ce29bd59084be018c44ae1c5d2823728", 0x44}], 0x4, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [r5, r6, r0, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r13}}}], 0x48, 0x4000}, {&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)="06f92d20dc37f0d2e388374b2f9267d92ce6ca730da9562708770a0bf26a60c6e445dc609e632f21945eade4455527546fbb957ac895a81b6a0e9786d890e1289e5083d6dcea75f59c69812684b8b0a1ff2338c823c679f7203e7ae3950b37c9d0052a468e93cf9c6dda3c5d635fabcb054b0cbcc6c5a6515bb4e461e52f771b25fcfcb0be053fe700c34601fd341fabbcb556862d40ac53db6347c9e67de01ab1bff2cabccba9bd808b529a833955c6be44cb81a7c314226ead688c4e497a02d2ed746c7e6c85a6ed07dd438e217727d5d9899777740465946e8c1554e574ac9f657e", 0xe3}, {&(0x7f0000000580)="bc7a0996b0451152509f7e9fa0b5fb3aa6fecd36e356a9cea769affecd0b48aff11db06328cd5716948c363efdc9f33065a558b8fa6b1558ceb6941bbd1e41", 0x3f}, {&(0x7f00000017c0)="c65b7da39dbca500c5353af4b529281cecd136d29b121bc1a66f2a5acd6ffba0211060e21f0ce30511a4298bbf305da78fc14bcd38fa38771f24e3c0ca7f8b69625606ac3cf8e3856fe04da387ac2d4ac81d0dac727a1f98e9ca92b51ef7ea17b9e00283703f49bb514f223c61f8c12d572be517a58dae0a8b4f5145d4f7e4c5a1ea24ba1d785016f1c4459a7e74b0696840c88f3c55967e42db0b20b9a04c8986f6768291d8e61c00c30a25d260846b0697650914782cfa6fa68e7d249f4eeaae6f206127626931d2c5630335f0203bd7e34a99d622c0de919d4c05bee67a08a1a2c5a543f3ec637033eef7f91473e4ed231d", 0xf3}, {&(0x7f00000005c0)="3374b3d00c05a6f80d67be36", 0xc}, {&(0x7f00000018c0)="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", 0x1000}], 0x5, &(0x7f0000002a40)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r18}}}, @rights={{0x18, 0x1, 0x1, [r19, r20]}}, @rights={{0x18, 0x1, 0x1, [r22, r23]}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r33}}}], 0x90, 0x1}, {&(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b80)="d83ed33dc20327024f9df7a08759d43b8bffce2fcf7b7e5758f911d0a0eb0e401f8c495a388dad5d12022f7b90f49dfb656a7e8fc1368a4cf2508b4debcf3064b7", 0x41}], 0x1, &(0x7f0000002e80)=[@rights={{0x28, 0x1, 0x1, [r2, r34, r35, r4, r36, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r38, r39, r40}}}, @cred={{0x1c, 0x1, 0x2, {r42, 0xee01, r43}}}], 0x88, 0x44050}], 0x3, 0x8040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(0x0, 0x204040, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:06 executing program 4: 09:32:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @discrete={0x7, 0x9}}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x50) getdents64(r2, &(0x7f0000001380)=""/174, 0xae) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/4096, 0x10f0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x20) ptrace$getregs(0x12, r8, 0x1, &(0x7f0000001440)=""/4096) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 09:32:06 executing program 4: 09:32:06 executing program 5: 09:32:06 executing program 4: 09:32:06 executing program 5: 09:32:06 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$int_in(r3, 0x73, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:06 executing program 5: 09:32:06 executing program 4: 09:32:09 executing program 2: 09:32:09 executing program 5: 09:32:09 executing program 4: 09:32:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='dno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) read(r1, &(0x7f0000000500)=""/43, 0x2b) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x10000, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) select(0x40, &(0x7f0000000400)={0x4, 0xfffffffffffffffe, 0xfffffffffffffe00, 0x3, 0x1, 0x5, 0x17, 0x81}, &(0x7f0000000440)={0x400, 0x5df2, 0xfffffffffffff901, 0x6, 0x3, 0x9, 0x3, 0x800}, &(0x7f0000000480)={0x3, 0x100000001, 0xffffffff7fffffff, 0xfff, 0x2, 0x7ff, 0x3f, 0x4}, &(0x7f00000004c0)={0x77359400}) clock_gettime(0x6, &(0x7f0000000000)) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000003c0)) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000140)="bb043048b7f02447ddefdc92ec0fbc8c3dcbdd20ab35a814150e9f7d4f865ede1a6dfb41b6b2a7a109d6db1eda376c1549f6d271567d"}, {&(0x7f0000000180)="3056b27d4d9011f92570876ae23c8081ba807080cb7d1764b64e3ffbbd41f26c2071f0cd2a44e0aece3311b25c61"}], 0xffffdc2, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) process_vm_writev(r6, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/227}, {&(0x7f0000000700)=""/246}, {&(0x7f0000000800)=""/229}, {&(0x7f0000000900)=""/35}, {&(0x7f0000000940)=""/154}, {&(0x7f0000000a00)=""/10}, {&(0x7f0000000a40)=""/53}], 0x3, 0x0, 0x251, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 09:32:09 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400c1, 0x81) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000000c0)={0x9, 0x4, 0xffffffff, 0x2, [], [], [], 0x458, 0x10001, 0x9, 0x9, "65fa4c614aa4f5fef1f844b849decb42"}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c40000000000040000000000000"], 0x0, 0x0, 0x0}) 09:32:09 executing program 4: 09:32:09 executing program 5: 09:32:09 executing program 2: 09:32:09 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x10e329a4d3873867) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1c, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40009f8f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:09 executing program 4: 09:32:09 executing program 2: 09:32:09 executing program 5: 09:32:09 executing program 2: 09:32:09 executing program 5: 09:32:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000380)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:10 executing program 4: 09:32:10 executing program 2: 09:32:10 executing program 5: 09:32:10 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/\x00\x00\x00!\x00\x00\x00\xf0\xff@\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000580)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0xfffffffd, 0x5}, {0x7ff, 0x1}}}) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000300)={0x4000, 0x2, 0x7, 0x20}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x200004, 0x0, 0x7, 0x3c}, &(0x7f0000000200)=0xffffffffffffffb8) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000003c0)=ANY=[@ANYBLOB="430000022397505af8b54e202722a19d6d2e18247eb189dad6cd2a656a530000c65a375e227d67fe4e5dacb7b69bf8b19099adbb153d01be305863262a6bfff1"]) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r9) fanotify_init(0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r10) r11 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x280805e, &(0x7f00000007c0)=ANY=[]) getsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{0x4, 0x3, 0x4, 0x7, 'syz0\x00', 0x1f}, 0x2, 0xe03, 0x945, r12, 0x1, 0x1, 'syz0\x00', &(0x7f0000000340)=['/selinux/status\x00'], 0x10, [], [0x0, 0x40, 0xffe0, 0x9]}) 09:32:10 executing program 4: 09:32:10 executing program 2: 09:32:10 executing program 5: 09:32:10 executing program 4: 09:32:10 executing program 2: 09:32:10 executing program 5: 09:32:11 executing program 4: 09:32:13 executing program 5: 09:32:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:13 executing program 2: 09:32:13 executing program 4: 09:32:13 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="016300000b6300638fbb348fc90c40000083a0cea788d7d4a67c535500000000000000000000000000000000000080ecf19a37a42f5ca24e647084dc838e0d"], 0xffffffffffffffea, 0x0, 0x0}) 09:32:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) write$UHID_INPUT2(r2, &(0x7f0000000000)={0xc, {0x29, "55aefd6d380b82bd919490c3fdcf395c9a47d8f992fcbd5c33dda966c2b02d403b402cd5bf2e8db1c4"}}, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:13 executing program 5: [ 630.123413] binder: 20769:20772 unknown command 25345 09:32:13 executing program 2: 09:32:13 executing program 4: 09:32:13 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2f2d5ab8f06d18a6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0}) [ 630.152063] binder: 20769:20772 ioctl c0306201 20000780 returned -22 09:32:13 executing program 5: 09:32:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 09:32:13 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x7de, 0x8, 0x9, {0x77359400}, 0x2a, 0xffd5}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x802) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'q\x01\x00ue1\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, 0x0, 0x8000) lseek(0xffffffffffffffff, 0x0, 0x2) open(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 09:32:14 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x3, @empty, 0x7}}, 0x0, 0x0, 0x26, 0x0, "913ddd7ed85ee785fd04fed831a89290eb03197e343409490f9a4245512dfc2f454c883e830a43967fa9735dda4abb102412766a5a0fadf381a306692d918b45ef02bbeadd5c65dd36c50792990149e8"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc6c00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 09:32:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x9, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 09:32:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 09:32:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 630.939084] binder: 20803:20807 unknown command 65535 [ 630.945062] binder: 20803:20807 ioctl c0306201 20000780 returned -22 09:32:16 executing program 4: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x1ba, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x48570a556ba3f538, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000480)={0x749c, 0x2, 0x0, 0x3f}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x200000804, 0xffffffffffffffff, 0x8001, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') preadv(r7, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/126, 0x97}], 0x3ba, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x100082) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) dup2(0xffffffffffffffff, r8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x82) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r9, r10, 0x0, 0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000500)=0x6e) 09:32:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 09:32:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:16 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x20, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) tkill(r7, 0x32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x401, 0x5, [0x3, 0x194d, 0x55, 0x2, 0x1000]}, &(0x7f00000003c0)=0x12) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r11, 0x9}, 0x8) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) getpriority(0x2, r12) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, &(0x7f00000000c0)=0x7fff, r3, &(0x7f0000000100)=0x1, 0x80000000, 0x8) fadvise64(r1, 0x100, 0x8, 0x3) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 09:32:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:16 executing program 3: membarrier(0x8, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={r6, 0x3, &(0x7f0000000140)=[0x9, 0xc0000000, 0x6], &(0x7f0000000180)=[0x6, 0x0, 0x1], 0x41, 0x1, 0x1, &(0x7f00000001c0)=[0x494], &(0x7f0000000200)=[0x8]}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 09:32:16 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:16 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x6, @broadcast}, {0x2, 0x4e22, @remote}, 0x2, 0x0, 0x0, 0x0, 0x3c5, 0x0, 0x6, 0x3f, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63ffffff0e630c400000000000000000000000000000000000000000000000000000008c95e27a02e0f0b07a56a689754343908dea0332903c6affa15859c1f5a0564907b147ab03828b5fc38eec3ace42429835236a6b147249627a59421bc9807b8bd7e72bf2df031cb9e933ee5be559ec1dbb3f7c6d11bc10d947c3fe"], 0x0, 0x0, 0x0}) 09:32:16 executing program 4: timerfd_create(0x9, 0x0) request_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f00000000c0)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000001340)={0x4, @win={{0xa9, 0x0, 0xffff, 0x1}, 0x3, 0x1, &(0x7f0000000080)={{0xffff2981, 0x6, 0x5, 0x1f}}, 0x7fff, &(0x7f0000000340)}}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000010d746407dcd2154e75713fef00243bc62740f21089ab6b83a23e4d8aa4e31bf9801b8817ddc161a7d270fbe0372fe2db1e3cc38cc67743c3d10074bd385bc7fdf0451d9346a184948f232b38cc789c58b8a6e10d7b86e04e3827325dff77e63c0f76552b64df69d089269c38e2150b4016f7e4b654d11ea2cc816ec26e0405b7d617b08baf248fcc57d0c317cfadb0bf5a92b45c4724236d65e12d27f7280dc9868ae86149527679342108e794882c"], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x640042, 0x100) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r4, 0x7fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 633.511843] FAULT_INJECTION: forcing a failure. [ 633.511843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.532440] binder: 20856:20858 unknown command -40180 [ 633.537893] CPU: 0 PID: 20841 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 633.545783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.555140] Call Trace: [ 633.557741] dump_stack+0x142/0x197 [ 633.561392] should_fail.cold+0x10f/0x159 [ 633.565550] ? __might_sleep+0x93/0xb0 [ 633.569448] __alloc_pages_nodemask+0x1d6/0x7a0 [ 633.574128] ? __alloc_pages_slowpath+0x2930/0x2930 [ 633.579140] ? __lock_acquire+0x5f7/0x4620 [ 633.583377] ? __lock_acquire+0x5f7/0x4620 [ 633.587668] ? perf_trace_lock+0x109/0x500 [ 633.591912] ? check_preemption_disabled+0x3c/0x250 [ 633.592204] binder: 20856:20858 ioctl c0306201 20000780 returned -22 [ 633.596935] alloc_pages_vma+0xc9/0x4c0 [ 633.596951] __handle_mm_fault+0x186c/0x33d0 09:32:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x2000000000000011, 0x2, r3, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x10000, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r7) r8 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000200)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8bc01e1fed081857743d60845e1235c99e5eaf1213c3f55d5e35f23abd15873e95b3cf1c78c489b3a57ffdb54bf64f58af0f5854a972e9ce9df68a5d1474d565c57c3db1b8ca3b13746b820b3f6b94bcaee6ecd751e0824fd84d72a4dc1079762682316bce6b4ae4ab9ce5c5af7cf3d21284c42fa606790d9d0fe8001b97535ab9e87c1c59605e259affb2a389609358005f90892b59fcf02235aff3f098c5a", 0xa0}], 0x1, 0x5) ioctl$BLKRRPART(r6, 0x125f, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x200004) sendfile(r5, r9, 0x0, 0x80001d00c0d0) [ 633.596965] ? copy_page_range+0x1de0/0x1de0 [ 633.616216] ? find_held_lock+0x35/0x130 [ 633.620285] ? handle_mm_fault+0x1b6/0x7c0 [ 633.624540] handle_mm_fault+0x293/0x7c0 [ 633.628611] __do_page_fault+0x4c1/0xb80 [ 633.632692] ? vmalloc_fault+0xe30/0xe30 [ 633.636756] ? page_fault+0x2f/0x50 [ 633.640378] do_page_fault+0x71/0x511 [ 633.644163] ? page_fault+0x2f/0x50 [ 633.647789] page_fault+0x45/0x50 [ 633.651234] RIP: 0033:0x40941d [ 633.654409] RSP: 002b:00007f0b2a2e3070 EFLAGS: 00010202 09:32:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c63e7ff0b6b0000106307516a19a9cd1371710f9206b0088d0840000000000000000000"], 0x0, 0x0, 0x0}) 09:32:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 633.659754] RAX: 0000000000409410 RBX: 00007f0b2a2e4c90 RCX: 0000000000000000 [ 633.667005] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 633.674370] RBP: 000000000075bf20 R08: 00000000000002ec R09: 0000000000000000 [ 633.681625] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f0b2a2e56d4 [ 633.688891] R13: 00000000004cac92 R14: 00000000004e4280 R15: 0000000000000003 09:32:17 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 633.729426] audit: type=1800 audit(1577007137.049:156): pid=20866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17769 res=0 [ 633.758154] syz-executor.5 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 [ 633.770728] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 633.776657] CPU: 1 PID: 20841 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 633.778225] binder: 20865:20869 unknown command -1613044 [ 633.784562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.784569] Call Trace: [ 633.784593] dump_stack+0x142/0x197 [ 633.784611] dump_header+0x177/0x6cd [ 633.784622] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 633.784633] ? ___ratelimit+0x55/0x537 [ 633.784648] oom_kill_process.cold+0x10/0xadd [ 633.784658] ? rcu_read_unlock_special+0x639/0xd40 [ 633.784673] ? lock_downgrade+0x740/0x740 [ 633.784688] out_of_memory+0x2ee/0x1180 [ 633.784697] ? lock_acquire+0x16f/0x430 [ 633.784714] ? oom_killer_disable+0x1d0/0x1d0 [ 633.784723] ? mutex_trylock+0x168/0x1c0 [ 633.784733] ? pagefault_out_of_memory+0xb8/0xd7 [ 633.784746] pagefault_out_of_memory+0xc9/0xd7 [ 633.784763] ? out_of_memory+0x1180/0x1180 [ 633.784778] ? lock_downgrade+0x740/0x740 [ 633.784789] mm_fault_error+0xb6/0x2c0 [ 633.784800] __do_page_fault+0xa35/0xb80 [ 633.784814] ? vmalloc_fault+0xe30/0xe30 [ 633.784825] ? page_fault+0x2f/0x50 [ 633.784836] do_page_fault+0x71/0x511 [ 633.784845] ? page_fault+0x2f/0x50 [ 633.784856] page_fault+0x45/0x50 [ 633.784862] RIP: 0033:0x40941d [ 633.784871] RSP: 002b:00007f0b2a2e3070 EFLAGS: 00010202 [ 633.801125] binder: 20865:20869 ioctl c0306201 20000780 returned -22 [ 633.802267] RAX: 0000000000409410 RBX: 00007f0b2a2e4c90 RCX: 0000000000000000 [ 633.802274] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 633.802280] RBP: 000000000075bf20 R08: 00000000000002ec R09: 0000000000000000 [ 633.802287] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f0b2a2e56d4 [ 633.802293] R13: 00000000004cac92 R14: 00000000004e4280 R15: 0000000000000003 [ 633.823299] Mem-Info: [ 633.871507] active_anon:278231 inactive_anon:469 isolated_anon:0 [ 633.871507] active_file:13039 inactive_file:16540 isolated_file:0 [ 633.871507] unevictable:0 dirty:264 writeback:0 unstable:0 [ 633.871507] slab_reclaimable:14679 slab_unreclaimable:119144 [ 633.871507] mapped:59542 shmem:517 pagetables:3247 bounce:0 [ 633.871507] free:1086785 free_pcp:313 free_cma:0 [ 633.878912] Node 0 active_anon:1112924kB inactive_anon:1876kB active_file:52016kB inactive_file:66160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:238168kB dirty:1048kB writeback:0kB shmem:2068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 317440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 633.878930] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 633.878935] Node 0 DMA free:11812kB min:216kB low:268kB high:320kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.878957] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 633.878983] Node 0 DMA32 free:552928kB min:36380kB low:45472kB high:54564kB active_anon:1108828kB inactive_anon:1876kB active_file:52016kB inactive_file:66160kB unevictable:0kB writepending:1048kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10560kB pagetables:12988kB bounce:0kB free_pcp:1252kB local_pcp:716kB free_cma:0kB [ 634.108580] lowmem_reserve[]: 0 0 0 0 0 [ 634.112729] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.148487] lowmem_reserve[]: 0 0 0 0 0 [ 634.153640] Node 1 Normal free:3782400kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.187069] lowmem_reserve[]: 0 0 0 0 0 [ 634.191666] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11812kB [ 634.211099] Node 0 DMA32: 51*4kB (UME) 1121*8kB (UME) 4285*16kB (UME) 6849*32kB (UME) 3125*64kB (UM) 338*128kB (UM) 10*256kB (UE) 5*512kB (U) 8*1024kB (U) 0*2048kB 0*4096kB = 553476kB [ 634.234044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.246954] Node 1 Normal: 56*4kB (UE) 358*8kB (UME) 287*16kB (U) 64*32kB (UME) 20*64kB (UME) 8*128kB (U) 6*256kB (UM) 1*512kB (U) 2*1024kB (UM) 5*2048kB (UME) 917*4096kB (M) = 3782400kB [ 634.269797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.278902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.293473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.305468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.318026] 30118 total pagecache pages [ 634.324743] 0 pages in swap cache [ 634.328354] Swap cache stats: add 0, delete 0, find 0/0 [ 634.337971] Free swap = 0kB [ 634.342958] Total swap = 0kB [ 634.346430] 1965979 pages RAM [ 634.349822] 0 pages HighMem/MovableOnly [ 634.357688] 335858 pages reserved [ 634.363150] 0 pages cma reserved [ 634.366672] Out of memory: Kill process 18476 (syz-executor.5) score 1007 or sacrifice child [ 634.379854] Killed process 18476 (syz-executor.5) total-vm:73116kB, anon-rss:16572kB, file-rss:35904kB, shmem-rss:0kB [ 634.420688] oom_reaper: reaped process 18476 (syz-executor.5), now anon-rss:0kB, file-rss:128kB, shmem-rss:0kB [ 634.526123] audit: type=1800 audit(1577007137.849:157): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="sda1" ino=17768 res=0 09:32:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000000)={0x66, &(0x7f0000000140)=""/102}) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:19 executing program 2: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802192811bfa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) tkill(r3, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000340)={0x3e, 0x4, &(0x7f0000001700)="12e71a6e4c212ddb2907ed734e9c31d835509fa76fe2900c427a088be5ac0bb1576e5a63809e4bbbd9283f2234a7ace90dd554146138edad2b8b0ffb92221a3df9e2c4a7cd38379870cceb1832287365ec9550428715aa98a02110516f5b0e756218f94e6c96f4b831aceb164e7d6b7414aa28616dc39e4e463ae9c74ac2c7c85d14ab880e24ebc9c172a2f97c430b336318c50b3f8062eee7fbcebd176ec20e6ff23643a1fd6debff5a16d831afbbee33db21918e32846691c826e1c3b2e4c7c5", {0x47, 0x1f, 0x35315241, 0x3, 0x9, 0x7, 0xc, 0x9}}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) recvfrom$unix(r4, &(0x7f0000000680)=""/4096, 0x1000, 0x141, &(0x7f0000001680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/33, 0x21}], 0x8, 0x7f) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x5, 0x0, 0x0, 0x5, 0x141}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 09:32:19 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={[], 0x8001, 0xffff, 0x7c, 0x0, 0x4, 0x5000, 0x1000, [], 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x460480, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r13, 0xc008ae67, &(0x7f0000000440)={0xd3, 0x441f}) ioctl$DRM_IOCTL_LOCK(r9, 0x4008642a, &(0x7f0000000340)={r10, 0x4}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000000400)={r10, 0xc9c3eeb6aa28bd3c}) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/49) r14 = socket$unix(0x1, 0x1, 0x0) bind$unix(r14, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r14) r15 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r14, @ANYBLOB="615d377c14c1a6946f7c4f8cfd242cf5246df81837c2a1ada8fa9b9c911cb566aabc8f7bb2b529aad75a0126368a7f86650000000000", @ANYRESHEX=r15, @ANYBLOB="8108"]) recvfrom$unix(r14, &(0x7f0000000100)=""/190, 0xbe, 0x40000001, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r16 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:19 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f1a1dd6405bc5f48b39f11c1c3c75230180594d028e95f1972d87d3e52c6cba2daccd5f68919dfab2f13a62f867b4d5b9d8a5b9af8652b7350ca2625"], 0x2}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setrlimit(0x5, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000240)={0x0, 0x4, 0x5, 0x7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)=@secondary='builtin_and_secondary_trusted\x00') keyctl$link(0x8, r5, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r7 = getpid() tkill(r7, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 09:32:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fcntl$dupfd(r9, 0x0, r8) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r11, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 09:32:19 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x410200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$caif_stream(0x25, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r3, r4, 0x8, 0x8e, &(0x7f0000000100)="51195e7f07d9fbfd8d0cbc57317e75c5f680cc62d42daa8a35a99ba47d99028f6a29bf51d99596524cb835a924e73bf169d56c32918724177c04d717e23791d3593960bcda59e049cb17bf4a9f3edf72afa075999133054a9e77c3928cb2f95a1c9221d6153173db7e481312ce035fa03c2986cd61b5c87a7e26402f14bc49fff1f4cf9fea28879405298a07a176", 0x7f, 0x0, 0xfff, 0x1fa, 0x7fff, 0x1, 0x7, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dav/kv8\x00', 0x2a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000000c0)=""/112) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 09:32:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 09:32:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x33c0adf37702da58, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000000c0)={0x4, 0x4, {0x7, 0x3dab, 0x3, {}, {0xfec6, 0x7f}, @ramp={0x2, 0x1ff, {0x1, 0x401, 0x800, 0x8000}}}, {0x56, 0x3ff, 0x1, {0xfff, 0x3ff}, {0x8, 0x2}, @rumble={0x7ff, 0xf5}}}) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000140)={0x8, 0x1, 0x0, 0x9, 0x1, 0x6}) [ 636.826123] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 636.836755] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 636.858182] EXT4-fs (loop4): mounting with "discard" option, but the device does not support discard [ 636.868383] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 09:32:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r2, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x101000) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x800, 0x0, 0x7fff, 0x7fff, 0x5]}, 0xe) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x33, 0x2, 0x10, 0x0, 0x5, 0x0, 0x4, 0x81, 0x0, 0x11000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_getattr(0x0, &(0x7f0000000100)={0x30}, 0x30, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) 09:32:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=@md0='/dev/md0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='squashfs\x00', 0x0, &(0x7f00000003c0)='batadv0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x3}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RLINK(r5, &(0x7f0000000580)={0x7, 0x47, 0x1}, 0x7) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000400)=r2) 09:32:22 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100000, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x200, 0x3]) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0x32, "87fbde5830d9407ca864f36ea886d86919af9ac3a5b0033ee57b36c72fd230dd4453e31a2b0f29039fb05cb9c00f8cc1e7c9"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6300000b6300001063c8ae52e10000000000000e630c4000000000000000001f174a7f1b01254e615051cd524d00000000"], 0x0, 0x0, 0x0}) [ 639.325159] 9pnet: Insufficient options for proto=fd [ 639.333813] binder: 20951:20956 unknown command -1362599152 [ 639.342433] binder: 20951:20956 ioctl c0306201 20000780 returned -22 [ 639.342860] SQUASHFS error: squashfs_read_data failed to read block 0x0 09:32:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:22 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x7fff, 0x0, 0x1000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x382, 0x0, &(0x7f00000000c0)=[@decrefs, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 639.387977] squashfs: SQUASHFS error: unable to read squashfs_super_block 09:32:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4c280, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 639.468724] 9pnet: Insufficient options for proto=fd 09:32:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) [ 639.538728] binder: 20975:20980 unknown command 0 [ 639.585712] binder: 20975:20980 ioctl c0306201 20000780 returned -22 [ 639.606066] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 639.619405] squashfs: SQUASHFS error: unable to read squashfs_super_block 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}, 0x1400}, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 639.653493] 9pnet: Insufficient options for proto=fd 09:32:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 09:32:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7fb, 0x1}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt(r4, 0x6, 0x9, &(0x7f0000000000), &(0x7f00000000c0)) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000000c0)={0x0, 0xfffffffa, 0x1, [], &(0x7f0000000040)=0x6}) 09:32:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=@md0='/dev/md0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='squashfs\x00', 0x0, &(0x7f00000003c0)='batadv0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x3}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RLINK(r5, &(0x7f0000000580)={0x7, 0x47, 0x1}, 0x7) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000400)=r2) [ 639.827541] 9pnet: Insufficient options for proto=fd [ 640.011727] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 640.019081] squashfs: SQUASHFS error: unable to read squashfs_super_block 09:32:23 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000380)={@mcast1}, &(0x7f0000000280)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) prlimit64(r2, 0x6, 0x0, &(0x7f0000000180)) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000480)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x222561, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000002c0)={0x0, 0x0, 0x15, 0x2, 0x5422207c35e9deb3, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000300)={0x3f, 0x8, 0x175, 0x1, 0xe, 0x4}) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1cf300002200010000000000000000002400000008001100e2ab00008a6174bcd183702c30ac8dc0da2734a8fb8245cae4883a51e216582077ec0baec2090d784dd4b3b055a660d91a0b1e6bd15b8349bbc6c5f656ea69d22c92e6ff0cbc81e3171b8ffb7a0316d37f2c696d"], 0x1c}}, 0x0) time(&(0x7f0000000340)) 09:32:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000003c0)={0x0, 0x6, 0x9, 0x4, 0x0, "54a6fcc7dbf14809"}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="775526bd7000fbdbdf25020000000c0003030000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8008) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 09:32:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 09:32:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000001c0)={{0x5, 0x0, @reserved="fa79a96bc62d543882bafa113f6e2e0649d068cec395d607edc3057f27146302"}, 0x8b, [], "544a6f41da2afdb0109a3505a95cfd82728600472836ee2c65286592c8ee4ef40bbd4e9313b526d92ff9642aed80c5e491915016963d754000773fab1517de0d1263610c81d9d03471f9d7c9b61dcc5848ebeeefe7a56b41a845a852559b242df43a1b1a55c842bb6faf090a81e1250d6fdb9b540c81cd2ccb3ccbb179df816937d38898510dabda660b17"}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x40, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:hald_cache_t:s0\x00', 0x22) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7469c7e622ffffff00000000000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r5, r6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2000080001, 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) bind$unix(r1, &(0x7f0000001680)=@file={0x917e0e090bb1b5a3, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg$can_raw(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/201, 0xc9}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/126, 0x7e}, {&(0x7f0000001480)=""/224, 0xe0}], 0x7, &(0x7f0000001600)=""/30, 0x1e}, 0x2000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', {}, 0x6}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 640.254379] 9pnet: Insufficient options for proto=fd 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 09:32:23 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@remote}, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x620101, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc=@id, &(0x7f0000000180)=0x218) r6 = socket$inet6(0xa, 0x803, 0x2) sendmmsg(r6, &(0x7f0000008440), 0x40002c7, 0x0) 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:23 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 640.415693] 9pnet: Insufficient options for proto=fd 09:32:23 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x400000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r4}, &(0x7f00000002c0)=0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r7, 0x7, 0x6, [0xe4, 0x200, 0x8, 0x6, 0x3, 0x5b0]}, &(0x7f0000000280)=0x14) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2000, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 640.464504] FAULT_INJECTION: forcing a failure. [ 640.464504] name failslab, interval 1, probability 0, space 0, times 0 [ 640.497158] CPU: 0 PID: 21055 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 640.505096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.514581] Call Trace: [ 640.517172] dump_stack+0x142/0x197 [ 640.520796] should_fail.cold+0x10f/0x159 [ 640.524937] should_failslab+0xdb/0x130 [ 640.528905] __kmalloc_track_caller+0x2ec/0x790 [ 640.533603] ? __sb_end_write+0xc1/0x100 [ 640.537655] ? strndup_user+0x62/0xf0 [ 640.541553] memdup_user+0x26/0xa0 [ 640.545094] strndup_user+0x62/0xf0 [ 640.548724] SyS_mount+0x3c/0x120 [ 640.552163] ? copy_mnt_ns+0x8c0/0x8c0 [ 640.556038] do_syscall_64+0x1e8/0x640 [ 640.559909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 640.564762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 640.569944] RIP: 0033:0x45a919 [ 640.573134] RSP: 002b:00007f3fb4afdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.580830] RAX: ffffffffffffffda RBX: 00007f3fb4afdc90 RCX: 000000000045a919 [ 640.588088] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 640.592804] binder: 21057:21060 unknown command -1325374708 [ 640.595367] RBP: 000000000075bf20 R08: 00000000200001c0 R09: 0000000000000000 09:32:23 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 640.595374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fb4afe6d4 [ 640.595380] R13: 00000000004c7c9b R14: 00000000004dec40 R15: 0000000000000005 [ 640.655869] binder: 21057:21060 ioctl c0306201 20000780 returned -22 [ 640.696529] FAULT_INJECTION: forcing a failure. [ 640.696529] name failslab, interval 1, probability 0, space 0, times 0 [ 640.708018] CPU: 0 PID: 21064 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 640.715909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.725255] Call Trace: [ 640.727838] dump_stack+0x142/0x197 [ 640.731483] should_fail.cold+0x10f/0x159 [ 640.738144] should_failslab+0xdb/0x130 [ 640.742116] kmem_cache_alloc_trace+0x2e9/0x790 [ 640.746784] ? kasan_check_write+0x14/0x20 [ 640.751016] ? _copy_from_user+0x99/0x110 [ 640.755163] copy_mount_options+0x5c/0x2f0 [ 640.759399] SyS_mount+0x87/0x120 [ 640.762856] ? copy_mnt_ns+0x8c0/0x8c0 [ 640.766744] do_syscall_64+0x1e8/0x640 [ 640.770627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 640.775470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 640.780656] RIP: 0033:0x45a919 [ 640.783837] RSP: 002b:00007f3fb4afdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.791542] RAX: ffffffffffffffda RBX: 00007f3fb4afdc90 RCX: 000000000045a919 [ 640.798804] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 640.806061] RBP: 000000000075bf20 R08: 00000000200001c0 R09: 0000000000000000 [ 640.813319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fb4afe6d4 [ 640.820682] R13: 00000000004c7c9b R14: 00000000004dec40 R15: 0000000000000005 09:32:26 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8c00, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x101102, 0x31) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:26 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000006c0)={0x3, 0x0, @pic={0x1, 0xcb, 0x4, 0x1f, 0x7f, 0x67, 0x40, 0xc4, 0x7f, 0x20, 0x20, 0x2, 0x3f, 0x5, 0xa1, 0x4}}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000001c0)={0xfffffdb3, 0x0, 0x1, {0xfffffffffffffffe}}, 0x18) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x41a001, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r1, r7, 0x0, 0xc, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) 09:32:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x69, 0x80}]}, 0xc, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300), 0x4) bind(r3, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes128, 0x4, [], "283ecc9d385c80486d644c50d5beef85"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4846}, 0x4004) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) getsockname$packet(r4, &(0x7f0000001800)={0x11, 0x0, 0x0}, &(0x7f0000001840)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'syzkaller1\x00', r6}) ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0) 09:32:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r1, &(0x7f0000000280)=""/95, 0x25) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 09:32:26 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/_ep/r#\x00\x00\x00\x87P\x00', 0x0, 0x6) r0 = syz_open_dev$binderN(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000000c0)={0x6f, "608009785dcb1ceea80425ef2c2bcc553e34570cb70b248fdd606bfb0311b492", 0x0, 0x3, 0x20, 0x2, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 643.266574] FAULT_INJECTION: forcing a failure. [ 643.266574] name failslab, interval 1, probability 0, space 0, times 0 09:32:26 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x1c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000100)={'/dev/kvm\x00'}, 0xa, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000140)) r7 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000002c0)={r14, 0x1, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffe68, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09631040000000000000000000000000000000000b68fc8758253be33f0840000000000000000000007440006d6c000100"], 0xffffffc5, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) [ 643.364742] CPU: 0 PID: 21079 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 643.372677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.382025] Call Trace: [ 643.384606] dump_stack+0x142/0x197 [ 643.388223] should_fail.cold+0x10f/0x159 [ 643.392361] should_failslab+0xdb/0x130 [ 643.396319] kmem_cache_alloc+0x2d7/0x780 [ 643.400452] ? __do_page_fault+0x358/0xb80 [ 643.404708] getname_flags+0xcb/0x580 [ 643.408495] ? trace_hardirqs_on_caller+0x400/0x590 [ 643.413500] user_path_at_empty+0x2f/0x50 [ 643.417633] do_mount+0x12b/0x27d0 [ 643.421157] ? retint_kernel+0x2d/0x2d [ 643.425032] ? copy_mount_string+0x40/0x40 [ 643.429263] ? copy_mount_options+0x18f/0x2f0 [ 643.433744] ? copy_mount_options+0x19e/0x2f0 [ 643.438227] ? copy_mount_options+0x1fe/0x2f0 [ 643.442707] SyS_mount+0xab/0x120 [ 643.446166] ? copy_mnt_ns+0x8c0/0x8c0 [ 643.450057] do_syscall_64+0x1e8/0x640 [ 643.453957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 643.458814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 643.464002] RIP: 0033:0x45a919 [ 643.467179] RSP: 002b:00007f3fb4afdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.474890] RAX: ffffffffffffffda RBX: 00007f3fb4afdc90 RCX: 000000000045a919 [ 643.482148] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 643.489406] RBP: 000000000075bf20 R08: 00000000200001c0 R09: 0000000000000000 [ 643.496666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fb4afe6d4 [ 643.503921] R13: 00000000004c7c9b R14: 00000000004dec40 R15: 0000000000000005 09:32:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000006c0)={0x3, 0x0, @pic={0x1, 0xcb, 0x4, 0x1f, 0x7f, 0x67, 0x40, 0xc4, 0x7f, 0x20, 0x20, 0x2, 0x3f, 0x5, 0xa1, 0x4}}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000001c0)={0xfffffdb3, 0x0, 0x1, {0xfffffffffffffffe}}, 0x18) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x41a001, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r1, r7, 0x0, 0xc, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000d) 09:32:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fchdir(r2) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, {0x9381, 0x3, 0xf90f, 0x1}}) 09:32:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:27 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c6300002df200001063084000000000800000000e630c40000000005700000000000000ef733f9f33f576b22896ca386ecdb1b6457c2a0eb880ffc4bf1edbda99758d34fde265ac9d5e2021520f899c"], 0x0, 0x0, 0x0}) 09:32:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, r5) [ 644.273253] binder: 21135:21141 unknown command 61997 [ 644.288138] binder: 21135:21141 ioctl c0306201 20000780 returned -22 09:32:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:27 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d969f0600ce8eb7318eb2030afd621d478af1e0ea5c1d92e4bdd501f2cc744295b464cae9b0f249f1e4f6d873c49babf30ffc79eb5fb93e788219394092e2f20f57a321ea7661e76fd06059fb15aeb28d7440968cadfbe36cb5982ccb42d3fb805b402a2e68f7b0a90afd1f3c12b07421d070227f5569d53572a64c910fa1a204e8bdc37376e9faf4981b6b3632fd", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 09:32:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) accept4(r1, 0x0, &(0x7f0000001740), 0x800) r3 = syz_open_dev$mouse(&(0x7f0000001b00)='/dev/input/mouse#\x00', 0x9, 0x80400) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001880)=0xfffffffffffffee9) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f0000000500)=[{&(0x7f00000002c0)="357e5239149f663f8ef7a09f465f5b2b2e0f62e8865733127d5563b9ebd117a4c7123883bf74c117bdbc56fc54d94bb1d620bdafce16c626b63340e971cd3971d0ebc1c6150f86df004b07ab2a1352785d8873c006332d8cbd7081983ac53b9705f753cb32836b9dddeb102a6f086a541572c22f3c4e24f246dffc4e48dd469b1267afe6c45a0add9dfac7c4c2e12deb919f2ceb40e2", 0x96, 0x1ff}, {&(0x7f00000003c0)="0151d08f12ab7b38089d8a3756e332c509780908de6d35ed88a30b5b1c829e46772dfc70f1efb1628b5f0b0391fc636d37a47b357d105f529149e9f8ffd19c591a7075ce940452410421d77903998fb86636bbe56dfedbbe1248a459473970b5e06e6409899f9243cc8da819a910dfe28665a7bb4ebcd2859776f0d65369df46fd11c63719cbbe6f36de14b9e7db49989756d3eb5a31e7ee6c95930785c39d9a463c504f551b1d50f1b8d63b45ec5c0c5abf740608d4145c86e202a666ce0103035f117f223b02559ae5f0b2431e99a2564774beea30c7", 0xd7, 0x9}, {&(0x7f0000000180)="6cc0a5edac09", 0x6, 0x1}, {&(0x7f0000000640)="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", 0x1000, 0x2}], 0x80000, &(0x7f00000018c0)=ANY=[@ANYBLOB='file_umask=00000000000000000000007,creator=N=:\v,uid=', @ANYRESHEX=r2, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303030303030372c73657373696f6e3d3078303030303030303030303030303433372c747970653db8e989322c747970653d76a801da2c63726561746f723d011c2c2a2c666f776e65723d", @ANYRESDEC=r4, @ANYBLOB="e30bb8202130f86608f6c65e9ff3f581c9f6a1addc22c43fc05aa72e6411f27e1205412ebf1d351c176aca7f5b7a4ef4d83e86c7791809eab3f70d79fa017bb6c2d4a5a0364a985ddfb0d612b8e04e328633e577ca3a81752e111821186dbc532084823bc0a0d235e53f0c84b2f0735f299003d3a0d0f09840fc40c0dd3c271883b3a0a9838f44cbc28d8d1733c66faf476371b7e4fa6fb8021f"]) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x1}, 0x0) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, [], 0x19}, 0x401}, 0x1c) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @remote, 0x2, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r10 = creat(0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000380)=0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:32:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, {0x1, 0xdb, 0xf9, 0x7, 0x35, 0x81}}, 0x8) 09:32:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getresuid(0x0, &(0x7f0000000340), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6e41b242b07000000ea00000000e1000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0xfffffffc, 0x1, 0x100000000}, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=0xbd0d, 0x4) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0xa) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc), 0x4) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4, 0x0, @local}, 0x1c) 09:32:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:32:27 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x121002, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6330befb878f6cecad084000000000000000008c6388878d37d490f0d06ec60e630c40000008000000000000000000842c633e7c4691a9c5da4d9497c71c749b56b9baf0a60ddf7935ea6e6a5ea71ed0664e5b3a76808e3ef55bcf51ae8809d738544b46a6dcd724071fcd7d3eb1962d2423d665da3ca4fb042cc1f4e4f9da072ce23c4ecd0bbd5b5469c2f26d29966cb7cd985a3d46df63fcecaaddfcc2afe1dedd8ef803fb9300e0184ac1fb6b4281c41cc91526290b1e474ee1e1"], 0x2bf, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0x8, 0x2}) [ 644.614123] 9pnet: Insufficient options for proto=fd [ 644.678415] binder: 21170:21173 unknown command -1104125172 [ 644.713061] binder: 21170:21173 ioctl c0306201 20000780 returned -22 09:32:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000002b5b7e7eb37e4f6c98077b03d0c38fe6ea124e9f5a464552ee80b4f2f9507d7ef4509706", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0011c4648c0a6e508e12a0e111b75b2ea5ff7ff1e5791107f87fe96a9006bad21dbb3f049d83aadb2c6e54043af9df6f6213c11a568d7172c6a52bb26a3b04f8ce3f28e7ee1de7a61d8ea3d9dc55ce3d7ba274f4a9cd0e22a63f85b37bb980c8979f719f20ed9464bc02b1cbaafc7c2675a59343405eb9a1556b9098cd7caab44afba01d4915cd256f441ac211d1b282838de0009f4f748403a8f967c6271a8b53ab1d597399572715c999d13a04c8105250f8b6f6d70c5426beb8a57ee98cb31f9926cbacba85b55cecd96e761024e64c48ee6e"]) [ 644.796978] binder: 21170:21173 unknown command -1104125172 [ 644.809311] binder: 21170:21173 ioctl c0306201 20000780 returned -22 09:32:30 executing program 3: io_setup(0x4, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x1c9c380}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c0000"], 0x0, 0x0, 0x0}) 09:32:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x3) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open$dir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x880800, 0x48) 09:32:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getresuid(0x0, &(0x7f0000000340), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6e41b242b07000000ea00000000e1000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0xfffffffc, 0x1, 0x100000000}, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=0xbd0d, 0x4) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0xa) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc), 0x4) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4, 0x0, @local}, 0x1c) 09:32:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xd1, &(0x7f0000000080)="a0e82eca29d5cf6d4ef5f5174c68b8650803a6adbae722e0cffd39b6bbae", 0x1e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) fstatfs(r1, &(0x7f0000000140)=""/55) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00\x90,\xde\x8a\x1d1z+\xc1n\xe5\x888p\xf0\xa6\x04') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) sendfile(r0, r2, 0x0, 0xedc0) 09:32:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x680304, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45001}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r6, 0x8, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x10854) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x68, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x10000, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 646.766193] binder: 21200:21204 unknown command 811790 [ 646.786218] binder: 21200:21204 ioctl c0306201 20000780 returned -22 09:32:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = dup3(r2, r3, 0x80000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={r8}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r8}, &(0x7f00000001c0)=0x8) close(r0) r9 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r10 = fanotify_init(0x0, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r11, 0x4068aea3, &(0x7f0000000080)={0x3d, 0x0, [0x9759, 0x5, 0x0, 0x6]}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="1a72430c1300ac57b5a502866007d879062b3e83286ca900ebc061adbb85701a6ad1507e4f53c2d10c8bb8c4553b5b956d74df5f6035bedd68525da65b6fb8d0de27880da65c850db20c6b3d083aeb58572c280896"]) [ 646.969114] 9pnet: Insufficient options for proto=fd 09:32:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x4}, @in6={0xa, 0x4e20, 0xda6e, @ipv4, 0xa98}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @broadcast}, 0x1}], 0x54) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 647.073547] 9pnet: Insufficient options for proto=fd 09:32:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0xfb, 0x7f}, {&(0x7f00000002c0)="cae95034844de24cb9cf1c2d4d1493043b0b1fe6d284d7fd4bc227cd534cbb704cd93ba1209757e55df629019f2f81c89181f788bef4961c6a205d6a7fe0785478ca3ee142ba57070674a3f7f82a531edecbcc48645da2fb87509bf45c9338e0798936a7d572beed78ff21fb322b89e0b692ba14a43cb83f7d8c95b50f31b10a15321a9a3648d4540f13fca18aca3483302d1dfaab80b0620647e0dc4e7977ce75a4819eefe30c7fa286980be3099d372cba756040", 0xb5, 0x3}], 0x10000, &(0x7f0000000480)={[{@quota='quota'}, {@journal_checksum='journal_checksum'}, {@sb={'sb', 0x3d, 0xde}}, {@nodelalloc='nodelalloc'}, {@quota='quota'}, {@prjquota='prjquota'}], [{@dont_hash='dont_hash'}, {@euid_gt={'euid>', r5}}, {@euid_gt={'euid>', r6}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}, {@smackfsroot={'smackfsroot', 0x3d, 'security+}eth0!user'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type'}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000580)=@default) 09:32:30 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x5, 0x22, r1, 0x0) fanotify_mark(r2, 0x11, 0x40000000, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r3, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$rfkill(r7, &(0x7f0000000040)={0x4, 0x4, 0x2, 0x0, 0x3}, 0x8) r8 = fanotify_init(0x0, 0x0) fanotify_mark(r8, 0x5, 0x22, r3, 0x0) fanotify_mark(r8, 0xc6, 0x18, r3, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x5, 0x22, r9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52102, 0x4a) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000000, r10, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x80) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(r0, r11, 0x0, 0x10000) 09:32:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2000000000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c1e40000", @ANYRES16=r5, @ANYBLOB="0305000000000000000008000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xedf2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="781b6ee6dea9cf0862fcb85d6b19dccc"}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x10) [ 647.272318] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 647.287252] audit: type=1804 audit(1577007150.609:158): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 09:32:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x0, 0x7, 0x10001}) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3ff, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x21040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0bfa"]) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x204e40) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r5) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r7) r8 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r10, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r11) r12 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) eventfd2(0x5, 0x80000) socket(0x2, 0x8, 0x4) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r13) r14 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r15, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r16, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6300001063084000000000000000000e630c4000"/36], 0x0, 0x0, 0x0}) [ 647.368721] audit: type=1804 audit(1577007150.609:159): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 09:32:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x73, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x4e21, 0x4, 'rr\x00', 0x6, 0x53, 0x46}, 0x2c) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 647.522544] 9pnet: Insufficient options for proto=fd 09:32:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x22, 0x0, 0x5, 0x0, 0x9, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x2, 0xd, 0x8000000, 0x3, 0x40, 0x0, 0x2}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r5) r6 = fanotify_init(0x42, 0x81000) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) dup2(r8, r7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x12, 0x1a6273f2b2e289f7, 0x0) setsockopt(0xffffffffffffffff, 0x109, 0x1, &(0x7f0000d52ff0), 0x257) r9 = socket(0x10, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000d52ff0), 0x0) r10 = creat(0x0, 0x219) close(r10) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) lseek(r12, 0x3, 0x4) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) r13 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r13, 0x80046402, 0x0) r14 = accept4$alg(r9, 0x0, 0x0, 0x100000) r15 = creat(&(0x7f0000000140)='./bus\x00', 0x304) fallocate(r15, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r14, 0x0, 0x0) open(0x0, 0x0, 0x80) r16 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r16, 0x7ffffc, 0x0) [ 647.615523] IPVS: set_ctl: invalid protocol: 115 172.30.64.6:20001 09:32:31 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8400, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000001c0)=""/117) [ 647.672199] IPVS: set_ctl: invalid protocol: 115 172.30.64.6:20001 09:32:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0xcd53e6953e1cefa6, 0xa0, 0x20, 0x640, 0x9ab3, 0x1ff, 0xf, 0x1, {0xfffff000, 0x8001}, {0x9, 0x2, 0x1}, {0x23, 0x9, 0x1}, {0x6, 0x5, 0x7}, 0x2, 0x102, 0x1, 0x3, 0x0, 0x6, 0x4, 0x5, 0x80000000, 0x10000, 0x9b4, 0x1, 0x14, 0x1, 0x2, 0x6}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) accept$unix(r4, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x22cd82, 0x16f) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) [ 647.838193] 9pnet: Insufficient options for proto=fd 09:32:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)=@caif=@dbg, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000001800)=""/66, 0x42}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/135, 0x87}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002a40)=""/115, 0x73}, 0x40000100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x178000, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000300)='./file1\x00', 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="100006000000"], 0x5, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='.//ile0\x00', 0x8001, 0x1, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x1000, 0x8}], 0x100000, &(0x7f0000000480)={[{@noikeep='noikeep'}, {@grpquota='grpquota'}], [{@obj_type={'obj_type', 0x3d, '/dev/dlm_plock\x00'}}]}) ioctl$TIOCGSID(r0, 0x5429, 0x0) [ 647.991572] audit: type=1804 audit(1577007151.309:160): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 [ 648.069754] audit: type=1804 audit(1577007151.359:161): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 [ 648.112215] audit: type=1804 audit(1577007151.389:162): pid=21303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 [ 648.139815] audit: type=1804 audit(1577007151.429:163): pid=21303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/282/file0" dev="sda1" ino=17845 res=1 [ 648.203251] overlayfs: filesystem on './file0' not supported as upperdir 09:32:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x1}, 0xfffffffffffffdca) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152}) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x9, 0x2598d5ac6451ca98, 0xffffffffffffffff, 0x44d19000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8800000}]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) 09:32:33 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x183141, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0xb46c, 0x681c3c278622ac88) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0xa00, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r11) ioctl$SNDCTL_DSP_GETISPACE(r11, 0x8010500d, &(0x7f0000000240)) r12 = fcntl$dupfd(r10, 0x0, r9) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000280)={0x6, 0x10001, 0x6}) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x800, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r13, 0x12, 0x2, &(0x7f00000003c0)=""/55, &(0x7f0000000400)=0x37) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) sendto$rxrpc(r12, &(0x7f00000000c0)="3b8906148695c04ffb97eb08f183184fcbdcae71cfbbb38064abd614889366e8bd0c97dc77a1c28d2168a663752932b0e8f68dbc80f6d704fd4a7790bf87b742468cf9cbc7fffc32ead81124ded45c7aeee96fced94a8a41eb3b0882c29e8c10d28c21b985d62fcfc79048a0c7d9fa6f4c789bd05cb206518d3472eda07c7d18c910045cb88cdd11c1d37079fdf8b7ee125bc6254271374de8b2a30add", 0x9d, 0x1a81b, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0x28}, 0x2}}, 0x24) r14 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r14, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:33 executing program 2: r0 = socket(0x10, 0x800000000000803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766648a6f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @loopback}}) recvmmsg(r0, &(0x7f0000000000), 0x3, 0x0, 0x0) 09:32:33 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffff5, 0x0, &(0x7f0000000100)=[@enter_looper, @decrefs={0x40046307, 0x2}, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f00000000c0)) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x8}) 09:32:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000040)={0x3ff, 0x5, 0x4, 0x200}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000140)={0x1, 0x800, 0x4}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r1, &(0x7f0000000280)=""/95, 0x25) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/55, 0x37}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r8, 0x0, 0x35, &(0x7f0000000180)='nodev&mime_typesecurityselinuxvboxnet1trusted*md5sum\x00'}, 0x30) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x20) tkill(r9, 0x37) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 649.824084] 9pnet: Insufficient options for proto=fd 09:32:33 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fff, 0x480080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x2000000000000010, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c1e40000", @ANYRES16=r6, @ANYBLOB="0305000000000000000008000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40203}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x2c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x1c, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}], @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x54}}, 0x0) recvfrom$packet(r1, &(0x7f00000000c0)=""/228, 0xe4, 0x0, &(0x7f00000001c0)={0x11, 0xbfa3ae39ad719c0a, r7, 0x1, 0xff, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000280)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10001900daffffff0000000062e21f27"], 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000002c0)={'team_slave_1\x00', 0xce47}) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x10000, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000100)) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x7, 0x1, 0x2, 0xffff, 0xfffffff8, 0xfff0, 0x2975}, {0x40000004, 0x1, 0xbc790f90413c07bf, 0x5, 0xf3, 0xfea, 0x3f}]}) r3 = fanotify_init(0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000080)=0x1) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 650.069672] 9pnet: Insufficient options for proto=fd 09:32:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x8000, 0x3, 0x6}) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$void(r0, 0xa0062015) fcntl$setstatus(r2, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 09:32:33 executing program 1: syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6, 0xa, &(0x7f0000002600)=[{&(0x7f0000000200)="be5fb46edd8e15bf8583c6592afcec68bc5444218e859f071aa6f48bf3efc4e81e56ed41af1fe053f52e7559d2f89b870a0bad465abfaac2f39d659ba5a6907d47421ce08fd3ae1a47989ba47b6f89a87b409601517bf6e0e4c6e734df6875e6b67d564ec5c9493865f60fbe44e17f8e6d9062f370a61167509ed3f95358f8b39b48fedac536bde518c6cb1cded987b3ffcad1f0a059095247d8b8cd7aea11514d9ccfe0e1068825adbc", 0xaa, 0x7f}, {&(0x7f00000002c0)="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", 0x1000, 0x6}, {&(0x7f00000012c0)="558d3f64e6fe6f600ebf29a7abb0e88f3830bc32d355bb0d2b7e6ac8f393a9f5c76945abf847d0ed96b4406bef13fde09e2e3210f075108c567b5ee96b329f35ea4363a565b2f47b38239d12f527d78e2ef41ffb0ac299ab25785f85f369d012c0a94bfb36f7a7a836ac27ab6b5f0fd2c7375baa1538e17274954e609b25944acd896ca7485a5b5fcccaf2a22b8246ee707cd9a37dc7123d712a993d0d49b080b4ce540b3028cc044d0403598206b9533f5aa48e4b5e3dcae040f388af7a072afda608508b490a894badd1e3a32edc5ed33cf9c2c3e08ff1", 0xd8, 0x7}, {&(0x7f00000000c0)="a777a16da788a4504647550449db1fb6c3d9394565db", 0x16, 0x60}, {&(0x7f00000013c0)="dbd7a21061f56121386b49b7f311f15dcc6889b1edc5f446cdbb81fc32558befd0fe5dd21a680a8300b83cbafbc69c8ac87013e120c0095bf36c54d277b5de23b7dab811641be20d0ceddb28f1acc92e4855aa57f0e4827a9cbe606cd871a5af98f44ded8af9c47ab344c9214091b01860db348cfec9bfc4b6a41a727e513f9e55466b4d07485b481649e8fdb53f9da8fff0eb829a4f043267a8e62b363a044af1d35c0fcb7ee3fb97730604c223da1b3ec92d052d53a9138c16edb607e6566fb5a4746920390b7f00d67cadb988a31e4633046fd6eb560f46eb9b53a6b4bf303d13b7", 0xe3, 0x100000000}, {&(0x7f0000000100)="98cc8d8d351a0760101b86692c3a55fbe41f4ffebef85d1ea6d7585a2a7ae82782ce8845fac8e9d30cb4ba91027364af43d20b96c77a3d81", 0x38, 0xc0}, {&(0x7f00000014c0), 0x0, 0xf9}, {&(0x7f0000001500)="50083b69e819ec5f186ba3bdfe3bdce6dc36b10f654cc584d120c4ee17d61c506a970ad0fdffb1195123069de3eabcd7e2f1daab7d891484218d3fd1250a205e4e7f88dfc234e93425590d28447a38f7118fb14c595bdd6d653c7ef3759e5df8bd6cd46cc546e721713cdee9344e280002f9ae9fcb843d2b62dbd81fc77b0ad5417da7bdec6589b68dab2efe737801644b51bbc3c3", 0x95, 0x3}, {&(0x7f00000015c0)="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", 0x1000, 0x1}, {&(0x7f00000025c0)="dc5a4edc3ac70f0219fe4d22ed58ddd9fde9c8dcb691ce9e90514f5cf6831b2b62d13d2270a45319457991496fab", 0x2e, 0x8}], 0x208000, &(0x7f0000002700)='wfdno') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r2 = fanotify_init(0x0, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000002740)={0x1, 0x8, 0x0, [{0x100, 0x6ed4e4b1, 0x100000000, 0xa9, 0x7f, 0x9, 0x6}, {0x1, 0x1, 0x8, 0xff, 0x1, 0x8, 0x3}, {0x8000, 0x100000000, 0x7, 0x1, 0x80, 0x2, 0x5}, {0xfffffffffffffffb, 0xbc8, 0x8000, 0x80, 0x35, 0x9, 0x1f}, {0x9, 0x1de, 0x8000000000000000, 0xfd, 0x6, 0x1f, 0x3}, {0x6, 0x1, 0x7, 0xfd, 0x5, 0x47, 0x6}, {0x800000000000, 0x80000001, 0x9, 0x0, 0x8, 0x2, 0x1}, {0xfffffffffffffeff, 0x0, 0x81, 0x3, 0x4, 0x1, 0xe6}]}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:32:33 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) [ 650.297852] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 650.332688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.379201] bond1: The slave device specified does not support setting the MAC address 09:32:33 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400000, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r6) r7 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r9 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) [ 650.484995] audit: type=1804 audit(1577007153.809:164): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir140095154/syzkaller.pNnNu9/290/bus" dev="sda1" ino=16658 res=1 09:32:34 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0xab, &(0x7f00000011c0), 0x327}}], 0x1, 0x44080) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @window, @sack_perm], 0x4) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000480)=0x6e, 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) ioctl$FICLONE(r2, 0x40049409, r3) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x0) bind$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 09:32:34 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80e01, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 09:32:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000000)={0x3ff, 0x2, 0xb975}) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$FICLONE(r1, 0x40049409, r1) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 650.702507] audit: type=1804 audit(1577007154.029:165): pid=21389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir140095154/syzkaller.pNnNu9/290/bus" dev="sda1" ino=16658 res=1 09:32:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1406) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e24, @rand_addr=0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6300000a1917c6a9ed9a2e1493d3ba8530084000000000001d00000e630c400000000000000000000000001ad9a824df37d8c061b59ce748751b411dcc0f75d561601de527a8ae74eb38c4e79528cebba01c1db8d9fe1b7db0acc832fc93f078f8f2e7b2580ff494c93b6067af0c9dc8698309df0f2c243d6097f9c3cc7a53bdcd74b22f17960d4e28396a821a1a6cb32329f45df3be77467bd964fc0a9cf00072c1ce6733292b5775d8000000000000"], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) [ 650.859059] binder: 21404:21405 unknown command -971564790 [ 650.869633] binder: 21404:21405 ioctl c0306201 20000780 returned -22 [ 651.019217] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:32:36 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x29a2c10aa2bf6ede) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101400, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x39, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)=""/57}, &(0x7f00000001c0)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000200)={0x1, 'lapb0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c6300000b6200009763084000000000000000000e630caf1d59132b43a28686d92213cc"], 0x0, 0x0, 0x0}) 09:32:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0xfffffffffffffd0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x20010, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_int(r6, 0x0, 0x15, &(0x7f00000001c0), &(0x7f0000000340)=0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r9, 0x8080aea1, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)=ANY=[], 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xfcd77f27edb84500, 0x0, &(0x7f0000000440)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x3, 0x1, 0x7}) 09:32:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x40000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0x1000, [{{0x0, 0x3, 0x3}, 0x6, 0x7, 0x7, './file0'}]}}, 0x2a) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="480059fed0f106a1d636816ebf14739ee0296e7019fbc2fb5d5396d710e24d6404e813a3b8d40e1cb2dfd829388f642def0308ea00fbf59c8d4041af10d664f921d2d95c555d40fc58f3d7c12a3062e790f54764195d7b535c397cb1b5f62def9b53bb4da8cdbfbeb43663032d98b892faea6802a5d588777bcc03aabf105a806d64f27f286af3ff91acfc1ee7c60de9c11c3515b1ac3b6e5f28ca5e81bf4f033f23cb0ffdd7452971176f122cbbede53fc612c18e9443a70752cc10f86903f65595305d"], 0x10) r7 = dup3(r0, r6, 0x80000) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:36 executing program 4: mlockall(0x1) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x33, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 09:32:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r2 = fanotify_init(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:32:36 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 652.848664] binder: 21420:21425 unknown command 25099 [ 652.863251] binder: 21420:21425 ioctl c0306201 20000780 returned -22 09:32:36 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x1000, 0x0, 0x4, 0x59, 0x81, 0x4, 0x3f, 0x3, 0x2, 0x4, 0x40, 0x5}, {0x10000, 0x4, 0xd, 0x81, 0x80, 0x1, 0x2, 0xf9, 0x0, 0xb1, 0x5, 0x3f}, {0x1000, 0x2, 0xc, 0x7, 0x1, 0x8, 0xa, 0x7, 0x81, 0x4, 0x1, 0x3f}, {0x9bf7c40cdaadbf7e, 0x4, 0x8, 0x40, 0xc0, 0x0, 0x7, 0x2, 0x2, 0xf0, 0x4, 0x53}, {0xc000, 0x10000, 0x0, 0x81, 0x1f, 0x7, 0x5, 0x29, 0x2, 0x3, 0x5, 0x20}, {0x2000, 0x3000, 0xe, 0x4, 0x0, 0x32, 0x4, 0x80, 0x2, 0xb0, 0x5}, {0x0, 0x1004, 0xa, 0x9, 0x3f, 0x2, 0x0, 0x40, 0x1, 0xea, 0x0, 0x8}, {0x0, 0xf000, 0xa, 0x6, 0x4, 0x0, 0x9a, 0x40, 0x1, 0x5, 0x0, 0x1}, {0x0, 0x1}, {0x4000}, 0x4, 0x0, 0x9fd3e94eaa42e91f, 0x81, 0xa, 0x4000, 0x10000, [0x7, 0x9, 0xf26, 0xa5]}) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) setxattr$smack_xattr_label(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)='security.SMACK64EXEC\x00', &(0x7f00000003c0)={'9p\x00'}, 0x4, 0x3) r3 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000480)={0x87, "e738932852c40a71f36cdf751bd3a0ad90aa457d125164d382ca76afbf35af2c", 0x3}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000400)={0x40, 0x0, 0x1}, 0x10) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x6800) 09:32:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000000)={0xffffff7c, 0x0, &(0x7f00000000c0)}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xb0000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000140)={'eql\x00', @random="b90130c66baa"}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xe) 09:32:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r3, 0x0, r2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) accept4$tipc(r5, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x1800) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x369, 0x0, 0x0, 0xfffffffffffffe93) 09:32:37 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x40f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) dup(r4) getegid() getegid() chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getegid() chown(0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@default, @null, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) 09:32:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000140)={0x28, 0x0, &(0x7f00000001c0)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000000)) 09:32:37 executing program 2: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) mount$9p_xen(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'\x00', {[], [{@context={'context', 0x3d, 't\x01\x00\x00'}}, {@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@fowner_lt={'fnwner<', r1}}]}}) 09:32:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x20, r1, 0x4, 0x10001) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000280)) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000240)={'rose0\x00', {0x2, 0x4e22, @multicast1}}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r7) r8 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = accept4$x25(r2, 0x0, &(0x7f0000000300), 0x800) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000100)=0xc) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000000200)={'vxcan1\x00', {0x2, 0x4e24, @local}}) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r11, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000001c0)=0x54) ptrace$getregs(0xe, r10, 0x0, &(0x7f00000007c0)=""/4096) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c63fcff0a6300001063080800000000000000000e3c18bb42a2630c4000008e000000000000000000"], 0x0, 0x0, 0x0}) 09:32:39 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000c15020000008000000086b086a6"], 0x10) close(r1) r2 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="35bd95032d12ae7700a4da423d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) close(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d1a, &(0x7f0000000280)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7) close(r10) r11 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x1f, 0x20000) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000240)=0x1ca, 0x4) r12 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}}) r13 = fcntl$dupfd(r9, 0xf2b89645bf1b0ce7, r12) ioctl$EVIOCGSW(r13, 0x8040451b, &(0x7f0000003080)=""/4103) 09:32:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x800, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000007110180079c500007d1500000000000095000000000000000fe8c8d64e5e53"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f0000000100)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000}, 0xfffffffffffffcd8, 0x10, &(0x7f0000000080), 0x99416ca21e1bcd7e}, 0x39) 09:32:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x167eb7245ed1a6ab, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000100)={0xffffffff, 0x8, 0x10000, 0xfffffff8, 0x5}) 09:32:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x20}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x180, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r2, @empty, @multicast1}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) r5 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48", 0x53) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) sendfile(r5, r5, &(0x7f0000000200), 0xff8) r6 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00') [ 655.908360] 9pnet: Insufficient options for proto=fd [ 655.964210] binder: 21531:21549 unknown command -236788 [ 655.984963] binder: 21531:21549 ioctl c0306201 20000780 returned -22 09:32:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0xfffffffffffffffd, &(0x7f0000000140)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:39 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x411c02, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/232) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f00000000c0), 0x41395529) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000200", @ANYBLOB="0f000100", @ANYRES32, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="348a1458781828744c703c034396835740", @ANYRES32, @ANYBLOB="080004c7", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100002000000000020"], 0x11, 0x2) write$FUSE_ATTR(r1, &(0x7f0000000340)={0x78, 0xacb74bf4c193174a, 0x6, {0x4, 0x40, 0x0, {0x2, 0x7, 0x7, 0x0, 0xe40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9c6c, 0x0, 0xffffffffffffffff, 0x3, 0x1000}}}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0xc45a, 0x7fffffff}) clone(0x89030900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r5, 0xb03}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x244, r5, 0x1601, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x297}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x43}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8b8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x73780ae6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1854}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x40) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) 09:32:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x10, r1, 0x1b276000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000001c0)=""/243) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000002c0)={{0x0, 0x3, 0x2b9, 0x1}, 0x1, 0x100}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x80000, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000340)=0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='\xfc\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45001}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r6, 0x8, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x10854) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800c000}, 0x4000) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x7, {{0xa, 0x4e24, 0xc1cf, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}}, 0x88) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f00000000c0), 0x41395529) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000200", @ANYBLOB="0f000100", @ANYRES32, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="348a1458781828744c703c034396835740", @ANYRES32, @ANYBLOB="080004c7", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100002000000000020"], 0x11, 0x2) write$FUSE_ATTR(r1, &(0x7f0000000340)={0x78, 0xacb74bf4c193174a, 0x6, {0x4, 0x40, 0x0, {0x2, 0x7, 0x7, 0x0, 0xe40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9c6c, 0x0, 0xffffffffffffffff, 0x3, 0x1000}}}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0xc45a, 0x7fffffff}) clone(0x89030900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r5, 0xb03}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x244, r5, 0x1601, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x297}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x43}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8b8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x73780ae6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1854}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x40) preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) [ 656.698367] 9pnet: Insufficient options for proto=fd 09:32:40 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x713, 0x1, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6300000b63000010630840000000000000020000000c4000000000000000b52787eea1a119497b7df8"], 0x0, 0x0, 0x0}) 09:32:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff32, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000002b00)={0x6, &(0x7f00000003c0)=[0x2, 0x0, 0x1, 0x2, 0x80000000, 0x7ff]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002b80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) accept4$packet(r1, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002c00)=0x14, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x145403, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='\xa6:-\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r2}, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000002b40)=""/3) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = open(0x0, 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='.//ile0\x00', 0x5d, 0x8, &(0x7f0000002840)=[{&(0x7f0000000580)="972939c439668469fe40b90a655f8aa314fcd03a429370cc229eabb9", 0x1c, 0x1856}, {&(0x7f0000000800)="fa9b53d6c56038a2c9015647f2c743cf02f8b716c73d6b89d480bca5539d207ad16d82ee016aec8400e136310256e063ed1c8f048967696242d33df4e6d78b4611412c9739cb86e12097676b22dae2f0acc59ae6e5022a1c048dfcacd878190f994deb2ee52e7447bc94857c6797e66ab5aec7fc3fa711313056f6e653916cc8eaaa47c4b2107e1d319ab354d055ad40306411a99a493e28c138618ae4b6c58bdd174fbba7152c7c3b885a3dd05f053c81829e3e0370e8a184ccaf89504548dd87b4f355a5d7a5bedf13b8ee262c00b01145df7cbf5bf225b16fd5d12a6714f80958d2da02f622c6ccdda3535fb3bdba8bb801822fbbace066fb5113d1eac98c575f6c95a1d4fa237f79929a5f2f0a1f6cc588e4541b356fb481d7cc3a291b710e3eea1f5a71f3a7570c9a4a33811dbd5441a66863534cb7ef053629ce8c2e25f7d269e884d970b2f85af470904c855e1c7fd71451e0f7d41b9bf07839dd75d60b4c287e03b418eb400fb2b399f2a5430d7b11c8528f9bc3d18196650ddd72bd792f6581b5281547e05a7ec1911e695f523e1260f35c39736b7b51e363dd5fb27a525bb881aad74759162a496217339c3360411c69ed610e317c35f327ec3753a3b893c7367fc2249f0e29625606922de899fb9ab80688317a61311426da9e6b1eb94308626dde66858cfbec4a194c556f2e71099990fa3d2fa0f99dcfee7a151b9be53295660831d05191efc587a68a09054f80a597827a60c249de85b2796718b9aa9631830b8af7b91c2f446b14ec4e90f135c76d05103e81465f83990587bc95fbb1cec2def0cbecd6706b61fcfa48957e236369f067054cc30269ecab7ff970559d758a82c0d672e3e23f7dad77cec262efbb6e3eec6bfdb40551ba6c76b18f6a12333f139ba507b399bcee405fd90834efe91e8b581a1e4e65981d657ba07ed54b2c7a3d590ad3e673bd46cd0c78153941baacc6dcd456c303c17c27cce91f8e274bde351ea3b6f89d8a0e57ec016ab5d26e48b0f37a96f57df4c2ce7dd8305eadaa3724bacc2eb5026ad31bcfcf2f62dd52a196a09ee717dfa310a4296dbfea181ec50d35c68addcafdd42afb98b9d9e8a37d078cfe80dbe2340d652d3efc5af5584b55628d19b06f0a85628aadf73569f223a8bdfacc8b479658641d44216af32bea33d2eee2d4a6134154903fbe172a6c7aa244eb1d00a75b35ed545ab42b1ff85d8c70e097e62232730c18448154a9b8aaf93641ad3e1e0b5beebcb5b8e2bc61af1596f90647e8876e78c1b857f7cd667ff603a1db318125ea13373243f1b9c859d083b20e8fdfb21d7b81fb7892262c234e59f5fa4b1f51321cd959a0933cf6d29707ec87095df567bf3448fbe8e1b6e6a206a0391c067afccbd01b67ec6afb848f914df957879c5d2121bbeb91510ae4aa8f351d1119dfca8696222be8e48829e8f0b7c93079f6d6acd889afdc530680d33eb1fc7d05b73427ceb42b81106765a1a69a27e331e9c63b4ec7399713fbe07cd0c3bf2ed64aa8f08043f00098d7d18a2e49f5b9d560e3aed44cb52a038425286372e77fa4948d57702c24f1ac9075ac72967d0cc52f01bff659a934d0b67ad8ed3229756bd4abdb25d1ee18852dc435f1f05ddc828a1f473c4da6edaa2a67bf54173f65cb818df53457b309c5904470c2ef774c9ce322e55bcdb0675522b9c1d6cf7511f8cc5d9d74f2501507b0aee325cbd9dd8a9cfeaaeb9cbc904fab34bf0204a08d5b1762de70c3b20e1b20c982470e53d2d8f4bb5ca5d95056d68986ddaaaf9c5ff0a401d9c29f9037bdcb483eb5621c90cf5fadd6feab5b6da2904f06bd467accf2f61ea296f817d628313b9e77f5aa9a08130e21293969fdef5918581c3d8fa4d7f3b843137e25e7424a1f9b48fe79c198a96678c0b0a6ce52396e71291561d45ce5050c1b9436ce49c9915beeed50b27d79be89ef2a060d942a9801aaf3715f40d3942ffef3b49e8c1c0cdc6606e29980f03636891d06580aa9d5812fbe7ba573dbef3d8b5db79a19945d39ad37ece5780dd61e35f36ede764033895cdff01fa7d2d1763f10f8d060b2af29a16db597436cd976e1f646faceb2aae525d20af7e8e58abb5fa37f78f1fec1cab9084b8814c98f2396c8bb80749b16cc24223fd5f8c308f38ee9ca091f2f590a8fb93e7c110d2083d43b31b763e11aa134b0ad3ce2017b862f9f3f9863752856f2454fd7c159b552ea91e0f98c0ed4423fb011b01505dfde3d9026d4f974e8a9a6169416403515d9fefe1077f126f5afd1650f92a06330fc9aeb988a567c215e28f245dbcb3292dd96cb718ad4c99dd00cea6b556ab1a18d3d1aab1775facc3f9cd1d6a348070ee2f7388bc79a6d98dca02535b9e429e0b7797a1e9e30dc3404cb247751055689c38a4188bb1e3fbcc1ac95b690790664474a5ae41b6eebeca620d9ebb54ea992c8d0e944c986da8b9c5ccbe2216cee47ff47d00fcb2792e79bd583af8d81082dc708069129a359be16e1f96e170aa2bfc47b4ad28111b90bd9bc9b6fdcb91aa964c03f511f2cd8f02fda05ca37496faa95752550396811c43f6d0d8d38d8e1ac6622eb2f8f4397342b5a93d2aaee233726169c9ffb1955911b509283eaa5d06185b78de7fc5d7f519359437584bb410ed7788f35cd423965aa11edf6def24d392ea7f5593b1ba582dfa4a2be37d1e9d428d6aea199bb106814c5b784746978d3cac6a7189b708d53e87c2c76ad96004a22611d1fcd12b909e1da19e6ce634aa1a167204871d89e4d5d192cf8d3370b63a558c010d185b09aabaefc483409388f53715167794607ec969992392c88e3d991bc8487d1e593b7f1a33f646311a224d11c4e291975fd141659512822687146b925c0a1abbe00936b4dcedfe724e1c0f5b7e92948c1444267b9acbb17af8a90e974b90fb1d2db02929d909d0ea322e58c8bbb201fec13f6ea117704751e639c0c0aa264218d0461ee34a61be7747e47ceefd11d14973021b53e90687baeadc3ef6e8296062bb78ae14d98c08692dbc5e312a94799ae5ddb995abf29d9e06ed469cee78dbcb044fc7524f47a8090863bbfb9b6a72ea89052a7c5d7679a794957105bed7b11105937fafe1042b6e3acda4920719411f40868da47eaab873193463b8dffaa9fedf9fd764f5e07c406c9e9f970c94ae49a2280a7961a52b2e5abc6cc6e1d68dc73124689686f35823397c5d0c9474c213e7e705717d8f8488cf25a9e4b3bed5af6a902df3ad1a32d79f235d0faae7cc0ea7bc13f00045f58ed88280b4f9c059833aeea6241a46209c0415360d2b982958b5e785e5d80b109fdeb212c5d9a8748b2d3aecc6dc104867e4b2ba5129ccb077a4c1b43e7a2be26893442c218c1532ecda209dd51ad6d21955712842fbfa2c2df1ce765e717cf09f53d703a0963e3afaa739c48a7e8f802ba8cd5f755fd76d154e56f5608f69f69a4c7ad515b58b2c08339aba23a48c20d6adace0f9d42e9d99162ec913d7395fef8f28352d8563fd74a59b27ac83ec99ed56bc2ee31e63bc64470d9a1180e95d8addbf1bfa8126206f40337455e1b8ebc2bb8758c7487b8d86ac6fac2b5de1dcb837db927ede9145fdb475f4a70fda65b922d93c1be93acc5f943061b0c33a4da39dc978d910a7f01708526703c493869917ddc995cb6154b9f204584f47ad1eaed9ad20fe5598a682943501c9dc2e3c3ac21bc3e7a87b4fc46c6ea081d95e36cf7c4055165b4478a080db76812c689e2074a29faac420914720f0ac28a0cc41cab2641873d3e70759ee1af84f58426732bdacafcf52a83cfc2a15daebfab5d16665798df99ba1e04d6b6d3a3fd24de14e7eb959c23796c49f1a5efea33a2c370bb2eca3c92344915901c43392afdfa27dabdd596fc1ff0ee3425f30d39f117a90ca9d590d5bfa3eb0b40e6fd96938e265fe99aaa754f400a9646aafc1dc6b5070583c9d179ef99c831a2c0f8d3f89500785dc7da9982fa08674422a7351c84d7eed96920c169329abff6b9567a13f7aba322d60856dbef1a24f02dbd8b8efb1e1457494bb6c493895de5a9aef429fd0582b36a9c57327bc9e7999a67f4950b6fb606c0077967e1aaa648a625d9c0c35d5e2c94ffffe1743205ca4cb86c711f766b30557996b2da3dc35d724b67ec16855dfe861340c0d4fcd316400d04a68e235e4d0727977d7235a3716dcb6fc432dc6291fcab7c65c29850f1f9bb46bb4b67482aaeae5d76a839ecfb834197a0c359c8cdb2f9fc35f7293277812a51f906ef654af8dffadfce9a61d06e9af531f4d136e1a12a8e4c91f7d07b97eef435fc32ee0c3bf6032810c44442e9e444dfd31fe2d392661363c82b2b1e34fe6c68f68ef2fcaf9f31d85944621abeeae5febb5a43b1c79b07fc30770a9898d2640feca58695e17e1bb9e2e41e5b368bd81a4a27d689e4bed36f9cfe5057a85e8c11f580833bda58856b91561147e40b659bf19e9d4ac87f9b262ddaeead63b2587e9bfc39f6b9250a7fe2e4b72c3b8801a5dab0f348c9b130acfd795d09e166c639d7031f300e6c6dcb28fd3f2432ddcfe86a3b441b8c81ae4b7ab8fc8d798a60533129a067e2615fc4efcba607590c81cf9e53b272245bf0668b1a49f6bd0d4e5cbc6f7f0954ef376caa950be1fc76af776d32ca2f47ee097daf913bbf7f2d4653485a28cec13ae5ac5067ada41e9513d249e41e84a85e6f70710169342c1c8708508e4eac0f259b5d7859476e585efb6690d04cc892abbf21c68d6a5527f8dcfca7c70318419d5baae83bb8f1952e66f3364b8e203f57ce5bc4792bc85853528d2250aaa05b5ead6c38cea110507b5622126ddd4a1574db7f74f89a34ee1928e973e077076a89e8cec0ecd0a803ddc6502a3e1e10ff1001fa9a07d4e5e9c617fdc3ee083d948076c3355b5f07b7d590c43e59b78acd659ee8951096da8b2773db582041052306e98ff62001a2b3534b23b090563467e143d4f6f595f2c0c67da0460a8307ecba0dcba44e78bb4225fa64e21a6d051d94af0c697eac4bee011d3d9acb80d157de6b7cb35202a98aeef2782faaec247a3da0a845a058a75f64515e3a920ecc3206d417aa5dfced75c4bc4a61185b00a60c5a9287aad0c899aa580256f61b44a88d8b8dbb285ed8ef1d29d0cddda8a443cfe9eca1b8b650df8a6362252458c917437fdf2008bb14ad9c3325ad04233d066fc1769763edd50fbde44db005698de9464d34c4d613591ed317e343b6913fa272861945ca84687b68edb2f5b0d4008f1acae3deb8620a71c1e161249a78edfb67f012c285b3076643e78644c19491e352d12f3fa6577ae6f0c26579f56a0a84be2c176ae5cd65550cd2e620ea86105a726126b9ae22d17bc16b57513a524db91c670a4402575a22095fd168014b7c728a60d809a9a2de29bee98778dfe60d53062ae535afe07c34eb4123a2d012ce86d9018f73eba8b2b3e134efb1ec053227236c6032f354bafbc32179b9e022b0efde780527928ccc3f4921c53520256233b20b3a1ff7e8dd063571722bf6ac69df287c39534f5dd5e5f25cac4643a8002886b3f1e1893ce83134a583b4fbb13362a2cc39cfded245340b23751efccefc39a86714c12e2c3a51fbcfbfab47ced3dcfe1c6e55febb1a97e15b24fe84d114575d758e5d0980ba5ec34f03b1ce3ad34ba9d328e163960383bd65faf3220baa06bed14528dada45940fda3545f1fdd5946d8cec033a8ed1431c5cfc253efa85215b6cfb2d8d930b9892bf2f465a78e6cd2fdf", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000001800)="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", 0x1000, 0x9}, {&(0x7f00000005c0)="f7dc5c6c113b741e924383ef7ecb22d7a1aedd31535a288181454ed9c626a2df394561a8a8cf9026f11e2cf0ea0ec8b0f7debae3f2", 0x35, 0x3ff}, {&(0x7f0000000600)="1b7ad2e701e248d4e1f838d9d6eab62ed13b6e938f5059937b8cd598575b231d6e4958dfa3a1e476c5219ecdbfcf3381bf14f31be0c9ed3b6ffd2233863d1f39347f10147fcc124c4d04321b9c88b66cbb92a81ec230b9d84576728b7be4fbc29c37fd51da5247fa8b63c38577888c86a53f803a0dde504aeeb0da", 0x7b}, {&(0x7f0000000680)="b50e9525c6fb8ffee50e494fdab2a528fdfbe8599febd620919c3b9b3df704c139a3879914a560c8d7ad3df9489146c495af547427c70da819453c06fc303faa23706cb839512a7a63a4758711b1906f5ddb8eec86b19f7c91b6b6d2c2efb9e2662fdc7edd9ab8c1ad7a1b4aab803de2ffd7b309007b7bdec606a3442fff1f7c40dea8a58c394ad4125249fff08abbaa", 0x90, 0xffffffffffffffc1}, {&(0x7f0000000740)="4abaf988b827d2f1d1bd438ce383bff3cf4c83de3b0414897a68cd29aa01a6d81f401a11a194e11642e310305f81f9c5beddaf81a36dcdd55f74c0b358a55d2b781cb0e18b4013a8a31af11bb9f6c121b6829e22ef3c527964c2eea56c408c16183bb5343e80b89b161ece", 0x6b, 0x3}, {0x0, 0x0, 0x4}], 0x40801, &(0x7f0000002a40)={[{@grpid='grpid'}], [{@dont_appraise='dont_appraise'}, {@uid_gt={'uid>'}}, {@obj_role={'obj_role'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000280)) open(0x0, 0x22000, 0x16) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)={0x0, 0x589, 0xbe, &(0x7f0000000240)=0x100000000}) 09:32:40 executing program 1: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'rose0\x00', 0x3}) r0 = syz_open_dev$media(&(0x7f0000000200)='\x00\r\x00\x06=\xbe\x01\x04\x17\x1a\xd0\x01', 0x40020000c0d, 0x400) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) 09:32:40 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r1, 0x0, 0xfede, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x0, 0x408002) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f0000000640)='2', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_out(r3, 0x2, &(0x7f00000000c0)) syz_open_dev$cec(&(0x7f0000000240)='\x00\x00\x00\x00c#\xc0\x00', 0x1, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2080, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000002c0)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x5a68, 'fo\x00', 0x1, 0x70ce, 0x6f}, {@remote, 0x4e20, 0x1, 0x7, 0x2, 0x3}}, 0x44) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000680)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000006c0)={0xfa2, 0x0, 0x16, 0x4, r9}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) 09:32:40 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x17, 0x3, 0x9}, {{0x77359400}, 0x0, 0x3, 0x70db}], 0x30) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x104081008}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, 0xa, 0x1, 0x4, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x6}, [@generic="7031737bc3114fb5b9bf7ccc040d5d14efbe001eb1961a420517ecec9aa758e1", @nested={0x1b8, 0x48e, [@typed={0xc, 0xc, @u64=0x9}, @typed={0x8, 0x4d, @fd=r0}, @generic="1e52b13e0d1b94e0cdac290bbdcda64812db974b24358ab3a85fd680fece8b3d68485d8b210c3eb24e8c47d0127d5542cf2974b697430b583764b06899b715ac355897ed08bac62067861a74fd953e69afcb07978e3a4af5bb10816b", @generic="332f9eea8caffa64590545176fb092624094d6fd4182ddbdf68acd4097ebcc662ed24eefa75c676ac712ff04b48e4494671545b9d900d0f998f9d72059d9f9225561b2e4c17ec592e851a98cbe1c7e7e74a72756067260685d1339e20df5d2818f82ddf540a12e9272d1ed56f5bccfd3109ec0337d1bae8d92b75ccfa1d7c0375c65b8ed82b04d7f49fe1a1d33d987c7e337b138f6ddb7750ad404b9fc5816dd75e77e1f9210919a79dbf23794e181109acc1767726d14b0813e4062731e6cc7e840425d15f525d653a54407cd0668cb5cc890a9ad77ec8eaa0f55001d384942ff0fd4c014", @generic="a17dd811bb62891202889ccc96babee24d0e082734bd7912375296ea80976662019cd6967525295f2027ff7730abffd54851e2699af2c57cf2004a628d417c06f327f5939971109189f91e123c3dadb72e4374bf30cd0979bced1fd766"]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x5}, 0x8) r3 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)=0x7ff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x24, 0x0, &(0x7f0000000680)=[@enter_looper, @register_looper, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) [ 656.826788] binder: 21613:21615 unknown command 1074528256 [ 656.833633] binder: 21613:21615 ioctl c0306201 20000780 returned -22 09:32:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e008125e00f80ecdb4cb904034865160800030004000000000004140e000a001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x8000) [ 656.968020] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.3'. [ 656.977301] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 657.196861] overlayfs: filesystem on './file0' not supported as upperdir 09:32:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x144a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00000c5000/0x3000)=nil, 0x3000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1}, 0x1, 0x0, 0x0, 0x1f}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) clock_gettime(0x4, &(0x7f0000000040)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 09:32:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', 'trans=fd,'}, &(0x7f0000000080)=""/139, 0x8b) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:32:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bu\x95\n\x15\x18b/00#\x00\x00\xfe\x00', 0x8, 0xca4e1a0783f7a830) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000001c0)=""/4096) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000380)=""/99, 0x63) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000000)={0xc0aeee341f184308, 0x1}) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) 09:32:42 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000000)=0xfffffff8) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x35c2bdeb689ef986) fcntl$setstatus(r3, 0x4, 0x6100) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) clone(0x200000, &(0x7f00000000c0)="50f2756dc2265ea9e3e3c7b519a1bb46d3a506c56f80354db38649f61043ba60431122ab7837b30e7c05a00ce3fd1849d10adc51d6aa66226f9362ababbf506396655b0ee0a252fad9d4b536de1885374cf1ac59bdef96654edcfe1da34df3e1154761b54490ea82c6948a8eae2b8929c763e91c099bc5dc57744fe4f5c467485e73a66d605ebaa520a23b32", &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000380)="012bfe04cb136eff25219ae4b249139077c11f827eeada7d04d1a59fac1bf88d6a84feaae8191d9f827b4f473508f0de73c8561141544348db1da31113f63e9716d20c93e13a9a36762f93b77374337b4938affa2b65558d32dce3cc94fc6cf3233b389f23160b53037a51ebbb7249b0874768e5fc7f5035aaa23119a9a83bb5793a8cedbe7d9fe004a6f16e75140d280b29d89b67bbb299e382063852f84ee1f5aa49c5dd64a400a9e80d4cac3ccdaee3c17787dcb4c220d8c2f4ce996c37a5d7e0f7b6d6ea2a30c89ab51cd51c") write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 09:32:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) memfd_create(&(0x7f0000000200)='rfdno', 0x4) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x403, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x0, 0x20343059, 0x20, 0x7, 0x2, @discrete={0x9, 0xffff}}) write$P9_RWRITE(r3, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x7fffffff}, 0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000080)={0x200, 0x40, 0x2, {0x81, 0x7}, 0x4, 0x8}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:42 executing program 2: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) unshare(0x8000400) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x401502, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000100)={0x4, 0x2, [0x7, 0x0, 0x1, 0x3, 0xfff8], 0x1f}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0) [ 659.432710] Unknown ioctl -1067691200 09:32:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r2 = geteuid() lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = geteuid() mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x20, &(0x7f0000000300)={'trans=xen,', {[{@noextend='noextend'}, {@cache_fscache='cache=fscache'}, {@aname={'aname', 0x3d, 'userselinux'}}, {@mmap='mmap'}, {@version_u='version=9p2000.u'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@version_9p2000='version=9p2000'}, {@uname={'uname', 0x3d, 'rfdno'}}, {@afid={'afid', 0x3d, 0xdf9}}], [{@uid_gt={'uid>', r3}}, {@fowner_lt={'fowner<', r4}}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r5}}, {@appraise='appraise'}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}}) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 09:32:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) close(r1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40041481) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) r9 = gettid() r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r10, 0x2271, &(0x7f00000006c0)) ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x20) wait4(r9, &(0x7f0000000580), 0x2, &(0x7f00000005c0)) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="325ac6d1a9765d255adb758dc8709f56e01c", 0x12, 0x5}, {&(0x7f00000001c0)="21cfc650d55b5499cade77e86d9c630ad48a9a13ea6830ab1137ad30b1074c439bd476ff29c9773bcbaea9cd80bd21d394d971192e46075d", 0x38, 0x34}, {&(0x7f0000000280)="c97c11c2064e7ba427da9aa9629c9bd26153844791a6014c8624bbff5558ae168967155d5fc1ad91009bdd04b53db22994c13818c167d242645cd6da6ed1e468b4fac09bef1ff3e9e5f43cdd87284b0c51c92ce0356dc9cda10cf1aa102f815feb9236f1abfe189c5c79235b66f9edfc359ea7aebe300c4e3fa5beaa8ba523a59d03461c004e4bdc17c237ca413eb98b5b5a4114eb891e03dcad272598f2e75c6f26fa8c5be580c12ec371bd29f1a75db5d417fd8e6bb196a6f156220963a27c9dd8758bd269812725c164a3a30dc92a6059ff", 0xd3, 0xdcc}], 0x80, &(0x7f0000000500)={[{@bsdgroups='bsdgroups'}, {@qnoenforce='qnoenforce'}, {@nolazytime='nolazytime'}], [{@euid_gt={'euid>', r8}}, {@obj_role={'obj_role', 0x3d, '-vboxnet0#$GPL'}}, {@dont_hash='dont_hash'}, {@measure='measure'}]}) 09:32:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') open(&(0x7f0000000500)='./file0/f.le.\x00', 0x400, 0x617aab7cdd3b6ad0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x2}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000480)={{0x3a, @multicast2, 0x4e23, 0x3, 'rr\x00', 0x901b5c207b402bc1, 0x9, 0x17}, {@loopback, 0x4e24, 0x2001, 0x3, 0x7a, 0xf00f}}, 0x44) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f00000005c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="cb000000", @ANYBLOB], 0x4, 0x0) renameat(r9, &(0x7f0000000180)='.//ile0\x00', r9, &(0x7f00000007c0)='./file0/f.le.\x00') 09:32:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x73, 0x0, &(0x7f00000001c0)) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcs\x00', 0x60800, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000c40)="640fbb4244f3c2002867660f7e1e66b9800000c00f326635000800000f30dd439e3e0f0966b9540a00000f320f20dd67e18b0f08", 0x34}], 0x1, 0x20, &(0x7f0000000bc0), 0x0) close(r0) r16 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) r20 = socket(0x2000000000000010, 0x3, 0xfc) r21 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r20, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000063eec684b2fbc337eb4c2d23ad2cadbb9c43f0415ca92647a01b79ee7a9b09c64ce95a", @ANYRES16=r21, @ANYBLOB="0305000000000000000008000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r19, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r21, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22, 0x40203}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r22, @ANYBLOB="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"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f00000030c0)={'vxcan1\x00', r22}) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) r25 = fcntl$dupfd(r24, 0x0, r23) ioctl$KVM_CREATE_IRQCHIP(r25, 0xae60) ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/572], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x27a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r26, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r26, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x8, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000840)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=0x101}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r27}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map={0x18, 0x4, 0x1, 0x0, r9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x3, 0x3, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0xb, 0x0, 0xa, 0xfffffffffffffffc, 0xbafb409e14e734ad}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0xea, &(0x7f00000002c0)=""/234, 0x41000, 0x4, [], r22, 0x14, r25, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x8, 0x8}, 0x2de, r27, r9}, 0x78) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r28 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r28, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:32:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000000c0)=0xeb) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000040)=0x2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r5 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=ffdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000e3ffffff00000000000000008214f70df6068156095628cf2537d3196bf13d017017a3be431c77f61aaeb11d147ac68bd06013bffa"], 0x10) dup2(r4, r6) [ 659.653829] XFS (loop3): unknown mount option [nolazytime]. 09:32:43 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000500)={0x0, 0x0, 0x0, [], &(0x7f00000004c0)}) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x490, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000180)={r10}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={r10, 0x7ff}, &(0x7f0000000140)=0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$selinux_create(r4, &(0x7f00000000c0)=@access={'system_u:object_r:hald_dccm_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x69) [ 659.762228] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 659.803972] 9pnet: Could not find request transport: ffdno=0x0000000000000008 [ 659.824362] XFS (loop3): unknown mount option [nolazytime]. 09:32:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$unix(0x1, 0x9, 0x0) r2 = dup2(r1, r0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f00000018c0)={{0x3, @name="d98bd101bb77e56bea316c702048ece3be3da6ef25461c4b0a7d8767c75682a6"}, 0x8, 0x9, 0x1f}) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "e9cf98e9a34914856fcbf4dc93b6649a43533222"}, 0x15, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) dup(r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000240)={0x0, 'ip6gretap0\x00', {0x1}, 0x7}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) write$char_usb(r6, &(0x7f0000000140)="b6318507cc1bb0b1e5fd1e0ddc453bfae42f3945ae7547ff386d47a6fc6a49839a7211b5df735f8190976d02b2c49984c412a4bc39f97c6545675ca04acef6634fa9fe281a2575eba2f7b258c7854278ff53db07e3cc9be1aa14d959fd17e78a3aed872621e4ad4251bba73d198c84", 0x6f) r7 = socket(0x10, 0x803, 0x0) r8 = dup(r7) sendmsg$rds(r7, &(0x7f0000001800)={&(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/18, 0x12}, {&(0x7f0000001400)=""/170, 0xaa}, {&(0x7f00000014c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/6, 0x6}], 0x7, &(0x7f0000001840)=ANY=[@ANYBLOB="050000000000000014010000080000000000000006000000", @ANYPTR=&(0x7f0000001700)=ANY=[@ANYBLOB="d9fa42b141043ca6"], @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB="feffffffffffffff"], @ANYBLOB="080000000000000002000000000000000300000000000000148c00000000000026000000000000000300000000000000180000000000000014010000020000000400000007000000"], 0x70, 0x30038000}, 0x800) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f00000017c0)={0x0, r8}) getsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001780)='/dev/video1\x00', 0x2, 0x0) [ 659.905376] 9pnet: Could not find request transport: ffdno=0x0000000000000006 [ 659.985403] IPv6: ADDRCONF(NETDEV_UP): bond16: link is not ready [ 660.018878] 8021q: adding VLAN 0 to HW filter on device bond16 09:32:43 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',u']) [ 660.035764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 660.070381] syz-executor.3 uses old SIOCAX25GETINFO [ 660.116594] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 09:32:45 executing program 4: io_setup(0xfffffffc, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r0, 0x53b4ed1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)={r1, r2+10000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r13, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r15, 0x0) r16 = getuid() setresuid(r11, r15, r16) shmget$private(0x0, 0x3000, 0x1800, &(0x7f0000ffd000/0x3000)=nil) 09:32:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'nlmon0\x00', {0x10000}, 0xfff8}) 09:32:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = shmget$private(0x0, 0xf000, 0x20, &(0x7f0000ff0000/0xf000)=nil) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@get={0x128, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, {{'sha1_mb\x00'}, [], [], 0x0, 0x2400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0x1f}, {0x8, 0x1, 0xef}, {0x8, 0x1, 0x19}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r6, 0x5e}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000580)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x3}}, 0x18) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/108) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r7) r8 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) write(r7, &(0x7f00000005c0)="f0c1d38c43f26ffd96f9733118f597712933ec1d04ffe011528118bd291ba85833f7e9c271801760600cb3882d69a6ddfac0538aaefab5a493bb3b0f59ece2b3f7ccd3295fe1064602c978d7abcf12295a4b48ee1d77578255cc3cc96348307c9aa56fedada777dc16bacf0cf951106480929381290ce5949eb8051214d213c30028b3d40df2bf9e72ec0ff0daa9955f7546315bcf97b4529b29edd4ba1c5efa4bee33", 0xa3) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r9 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 09:32:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 662.387638] audit: type=1400 audit(1577007165.709:166): avc: denied { bind } for pid=21760 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 09:32:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'nlmon0\x00', {0x10000}, 0xfff8}) 09:32:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f00000002c0)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) bind$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r3 = request_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='syz', 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000004c0)="205355286ae201e1d21c413510c7a33fb9f6a1f880c142669f1d2a77df8ba8d51f2b3d375ad661016b3908d8725efa9f750f2e9ebdd24f46f5e8127be114f55fca4abdbeca53aad1c00bd0d05b10258dcfb67258bd278df9a382c0c24cc6430d20774d9e0cabac3499ff3a6fb9c115754c28c8e0263212eff2bb38c65f1750c5236fd27bfc31d77272dd82202f3618bc6e0d20379dcc2f63e9ff9de24012f3cbc9a5795d0f65c34978d2baaee564db248fad19a959b6b757e9adbdb5d32544bcb214c1efb8b77ec51d6e09", 0xcb, r3) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000240)='trusted\x00', &(0x7f0000000280)='/dev/ubi_ctrl\x00') 09:32:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'nlmon0\x00', {0x10000}, 0xfff8}) 09:32:46 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x510000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x5e}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r2, 0x2}}, 0x18) r3 = getpid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x20) ptrace$peekuser(0x3, r4, 0x14) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000280)={0x20, 0x1, 0x0, 0x7, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) r7 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 09:32:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'nlmon0\x00', {0x10000}, 0xfff8}) 09:32:56 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000001200)={@random="ff772b82ffb1", @random, [], {@ipv6={0x86dd, {0x0, 0x6, "ee0600", 0x38, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0}, @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "6a62af", 0x0, 0x0, 0x0, @rand_addr="765fec89bf4d63457d6fd49fda359679", @empty, [@fragment={0x35}]}}}}}}}, 0x0) 09:32:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) 09:32:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) fanotify_init(0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x24000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000100)=0x401) close(r2) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x4008840, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="00002a98c6cb187ed935edf9d26349f4f36739b36271af9cd7f913433c6b87042573f3cb6cbdc299"]) 09:32:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2000000004001f9) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:56 executing program 4: socket$inet6(0xa, 0x80002, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006a6d9968162bb19d7e1f24"], 0xb8}, 0x1, 0xfffff000}, 0x0) 09:32:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b8010000000f01c174f764f7cd2c4d0f32440f20c0663508000000440f22c067f20f11ce0f09670f01c30f0966b8000000000f23d00f21f86635000000020f23f8", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:32:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/217, 0xd9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/181, 0xb5}, {0x0}], 0x100000000000000b}, 0x0) shutdown(r1, 0x0) 09:32:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) socket$nl_generic(0x10, 0x3, 0x10) [ 672.870816] 9pnet: Insufficient options for proto=fd 09:32:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000015c0), 0x10) dup2(r1, r0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r2, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 09:32:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x2) 09:32:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002b000503d25a80648c6356c11024fc00100000000a000000053582c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x10) 09:32:56 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb856) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x80, 0x0) 09:32:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:32:56 executing program 2: 09:32:57 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x20, 0x101000) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 673.648540] 9pnet: Insufficient options for proto=fd 09:32:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x7000, 0xe7e5d3706c68993d}) ptrace$cont(0x9, r1, 0x0, 0x0) 09:32:59 executing program 2: 09:32:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000805ff4)) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:32:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20000001) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x840, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0x9, 0x12) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r11, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000000000)={0x0, 0xc0000, r2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000200)={'system_u:object_r:getty_var_run_t:s0', 0x20, 'system_u:object_r:user_cron_spool_t:s0', 0x20, 0x6, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x86) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000100)={r12, r13}) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r14, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r14, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TIOCL_PASTESEL(r14, 0x541c, &(0x7f00000002c0)) 09:32:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:32:59 executing program 4: 09:32:59 executing program 2: 09:32:59 executing program 4: 09:32:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@access_client='access=client'}, {@afid={'afid', 0x3d, 0x8}}]}}) 09:32:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) epoll_create1(0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:32:59 executing program 2: 09:32:59 executing program 4: 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffa) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 4: 09:33:02 executing program 2: 09:33:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa401) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x840, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x4, 0x9, 0x1, 'queue0\x00', 0x6b}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/28, 0x4c) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080), 0x3, 0x0, 0xfffffffffffffe96, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x20) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x20) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x20) tkill(r7, 0xb) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 09:33:02 executing program 4: 09:33:02 executing program 2: 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) chroot(&(0x7f0000000000)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:02 executing program 4: 09:33:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/217, 0xd9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1}, 0x2) shutdown(r1, 0x0) 09:33:02 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002b000503d25a80648c6356c11024fc00100000000a000000053582c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(0x0) 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000000)=0x101, &(0x7f00000000c0)=0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:02 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x7de, 0x8, 0x9, {0x77359400}, 0x2a, 0xffd5}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='\t'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000042c0)=0x100000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x802) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'q\x01\x00ue1\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1090040}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) lseek(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="840000001b00010100000000000000023500000053854d8776193def869529d4e850669ed66955490c0c94212238af00c3cebaa26bd324d13bac5b5c3a85cc732f16f65b71a162b45c7f30ff98bde187f811f5fab3f0c87d3280fd72b4f4315a7fa46e5763866127351e7e8683eca59f0bd5d8fbc5ced6ec55dcf57674334dd93f0500000000000000540ef1fcb1000000eb0cce4a66378188b1a49a18e9b71bb7345e40e4dd0c3161a15eab20319c4ba8fbde05514d97"], 0x84}}, 0x0) 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x6a6acdeee76da94b}, 0xc) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'We+', 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@remote, @remote, @loopback, @mcast1, @mcast2, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@dev]}, @dstopts={0x0, 0x0, [], [@hao={0xc9, 0x0, @dev}, @enc_lim, @enc_lim, @pad1, @pad1, @enc_lim]}, @hopopts={0x0, 0x0, [], [@ra]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @dev, @dev, @mcast1]}, @dstopts, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@dev, @ipv4]}, @hopopts={0x0, 0x0, [], [@enc_lim, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x0, @dev}, @ra, @hao={0xc9, 0x0, @empty}, @enc_lim]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@empty, @rand_addr="1d17f94624f8b9d15e6abe39e5eb0c57"]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@loopback]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xcb}}}}}}}, 0x0) 09:33:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:05 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:05 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x510000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x5e}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r2, 0x2}}, 0x18) r3 = getpid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x20) ptrace$peekuser(0x3, r4, 0x14) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000280)={0x20, 0x1, 0x0, 0x7, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) r7 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 09:33:05 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r9, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r11) chown(&(0x7f0000000380)='./control\x00', r7, r11) lchown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r5, r11) r12 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}}) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) r14 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r14, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r14, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r16, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r17) chown(&(0x7f0000000380)='./control\x00', r15, r17) r18 = socket$unix(0x1, 0x1, 0x0) bind$unix(r18, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r18) r19 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x80002, &(0x7f00000001c0)={'\xff.g\xf8V)\xae\x94\x03', {'rfdno', 0x3d, r18}, 0x2c, {'wfdno', 0x3d, r19}}) r20 = syz_open_dev$vivid(&(0x7f0000000580)='/dev/video#\x00', 0x1, 0x2) r21 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r21, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r22 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r22, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r23 = socket$unix(0x1, 0x1, 0x0) bind$unix(r23, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r23) r24 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r23}, 0x2c, {'wfdno', 0x3d, r24}}) r25 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r25, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r26 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r26, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r27 = socket$unix(0x1, 0x1, 0x0) bind$unix(r27, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r27) r28 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r27}, 0x2c, {'wfdno', 0x3d, r28}}) r29 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r29, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r30 = socket$unix(0x1, 0x1, 0x0) bind$unix(r30, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r30) r31 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r30}, 0x2c, {'wfdno', 0x3d, r31}}) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r34, 0x0) r35 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r35, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r35, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r37, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r38) chown(&(0x7f0000000380)='./control\x00', r36, r38) r39 = gettid() ptrace$setopts(0x4206, r39, 0x0, 0x0) tkill(r39, 0x20) r40 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r40, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r40, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r42 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r42, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r43) chown(&(0x7f0000000380)='./control\x00', r41, r43) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x20) r44 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r45 = ioctl$KVM_CREATE_VM(r44, 0xae01, 0x0) r46 = fcntl$dupfd(r45, 0x0, r44) ioctl$KVM_CREATE_IRQCHIP(r46, 0xae60) ioctl$KVM_CREATE_VCPU(r46, 0xae41, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r46, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) r48 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r48, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r48, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r50 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r50, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r51) chown(&(0x7f0000000380)='./control\x00', r49, r51) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002140)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r53, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r54, 0x0) r55 = gettid() ptrace$setopts(0x4206, r55, 0x0, 0x0) tkill(r55, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000021c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000022c0)=0xe8) r57 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r57, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/218, 0xda}], 0x4, 0x0) fstat(r57, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r59 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r59, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r60) chown(&(0x7f0000000380)='./control\x00', r58, r60) r61 = gettid() ptrace$setopts(0x4206, r61, 0x0, 0x0) tkill(r61, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r63 = socket$unix(0x1, 0x1, 0x0) bind$unix(r63, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r63) r64 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r63}, 0x2c, {'wfdno', 0x3d, r64}}) r65 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r65, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r66 = perf_event_open$cgroup(&(0x7f00000025c0)={0x0, 0x70, 0x8, 0x5, 0x91, 0x8, 0x0, 0x7, 0x210, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000002580), 0x2}, 0x8, 0xbd1, 0xff, 0x0, 0x2, 0x1, 0x80}, r1, 0x8, 0xffffffffffffffff, 0x8) r67 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r67, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r68 = fcntl$getown(r1, 0x9) r69 = socket$unix(0x1, 0x1, 0x0) bind$unix(r69, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r69) r70 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r69}, 0x2c, {'wfdno', 0x3d, r70}}) fstat(r70, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r72 = socket$unix(0x1, 0x1, 0x0) bind$unix(r72, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r72) r73 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r72}, 0x2c, {'wfdno', 0x3d, r73}}) r74 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r74, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r75 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002880)='/selinux/validatetrans\x00', 0x1, 0x0) r76 = socket$unix(0x1, 0x1, 0x0) bind$unix(r76, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r76) r77 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r76}, 0x2c, {'wfdno', 0x3d, r77}}) r78 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000028c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r79 = socket$unix(0x1, 0x1, 0x0) bind$unix(r79, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r79) r80 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r79}, 0x2c, {'wfdno', 0x3d, r80}}) sendmmsg$unix(r0, &(0x7f0000002d00)=[{&(0x7f0000000280)=@file={0x2, './control\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000003c0)="521f4966a48bccff1bfeea485055ceae411bf6dba160411088c69d2617a0e843627cb498dc72c9a0fc4b92e8cc6d294293332a155a30c78d88eae48710708310a77f9e2e4be0d12cbd307779b0c14a3d40661f71f514f185371ed5301e02b2e9edad6b7a662e928e52a0dabd57011f8abb8b01ff75bdfa937a2b22b47c306b3bf084b0906ad53ffc5a89ba185c7269d48741adfb2d286cbe99066e5fa64462057b3727b5e484f12e5e5977128a1cb8ff8d6375d934a4a408973925", 0xbb}, {&(0x7f0000000480)="5a43f76ce7e3be75236ee19793ed4ea504855ecb59028d0cf888a018e5eb32c9953f69bcbf935f7a4b7fda6c799b281e43ccd7796d22103cf72028b9b4711e08bdc03aca58e97680a7865384ef36dd17ffc3d679d549bffaa004276226b80ad4c369ae502b2621f8d2a02388a5e04f0651aad3693e87949c43576449b1c39ff5d0906567edbde592639673f9fdf5870ab8c9152ce4042ea58e7a8de373d9f9083c849b0dca31a5c0645963624d20ba8859a297459316a1ca5851152989af76e8a2039511e88c9077f2e97fcd", 0xcc}, {&(0x7f0000000300)="d13244b6971bafa363c13210b9f0bfbbae963c0a535e59024e81fecdbfff", 0x1e}, {&(0x7f00000009c0)="0bb0fe94bb085f6407e97b3758447ccde24c3ba671f10141e3c3df87689cc68e4f039a4789dbf539a8a4486d0713192794d6728219c6c7e2fa508d75b07d0381065d5112c51f172860f0363d3ab00a071b3a447f3bf480d01b32e32934913e1afc34602758178c5ffd5f33e3ba9397dff3cd3ebbf518d91747e5583e873ddf24b64c5f2fa595996422c2c4a68d707a60ab1eb197be8e66b355e44ec30f814951213398f96e0f424db1c71899fa9aa720c60be85e938990fba4a979772bc32fc8b77d9f92e96c92e6d1ed20008964c1a2cbbc1f4cdd", 0xd5}], 0x4, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r10, r17}}}, @rights={{0x2c, 0x1, 0x1, [r9, r0, r13, r18, r3, r20, r21]}}, @rights={{0x30, 0x1, 0x1, [r22, r0, r23, r25, r26, r28, r29, r30]}}, @cred={{0x1c, 0x1, 0x2, {r32, r34, r11}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r38}}}, @cred={{0x1c, 0x1, 0x2, {r39, r5, r43}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r47, r51}}}], 0x100, 0x4}, {&(0x7f0000000cc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000d40)="7fca8fab14cac4683cbd063ec82f7acfc6c5f4a9423cd2232e8420955e94c3a582da5cff892fb8ed7d5238a010517a33a9e6f462d409ea7f01435a535883382d8ccc8a44c5d9970c58042e863806eadccb09d84b3936757cae9993d6f65d33b4f7a5088cde0f4fb1dc9cdaa03d9792018e70ff0f6ffb10cb42d1bae49b109735ed8f2cf519b6d5cef5721a20924cd4452a8ab4c824b1599e71493fe9049dcf1995b1a61530b6091ffaf7b090c5cca2448912d815e3967e78c7f91b18c8f9d7681fa6abf9662d471da87164cf1241197737773396b3a3110fad2c88da6ceaa34fb2abd75fc855d0b29ef8397a9065f2", 0xef}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="732b97175b0580508d9287e53ce6ddf38b7337fc9f97a93814b1a6f20d5d00941b0307346e13be19f3a9d424533c81de2e1fb6c90ab5d82ab9fc7cfed9547216a06b6f7d0b51a433cb6bffeaa4fb7edb96c4657100a25148adad14a6b97ad3268546da4deb238a183dfeda1764513a6f161f602133ee1845f8c85827e43f270fa398b75f2c33d77e17396204abf3548d7910037f2762", 0x96}, {&(0x7f0000001f40)="48b78a499213b1f50ba67369c0f3ae883280d3ad53ffc2a07fa8c9e4c4b167ba287d1a4f7e5437954777e19d0c838429d76e5fc11f1c5be10991ec97b960f90c726456c0a4ade8fba1bfcc70385da3522088257ecfc491009a5341e57a47effafc2a5e8e80ba0955ebafc8c051fe615c257665a55faa496270f8457ead66872ef253391347c4053420077606c718e544cec7f7d274c48115f024e42dc915afc9447da254a383ea78bd3db073762b877367cf6af9d224ff8b8d58171897fe83e36e1f3a6069b1262977836dd914", 0xcd}, {&(0x7f0000002040)="bebdee3b9a6bd0f20bfd1bbe9810fb611eb35171ba6d32a0f810755ae14328d6304bb3a8e448c808173f860af364e118ff6854fb8bc6d8ce273bce61b9987c4638a4df44fd049656d52ce14e45c58664834cac9477dc42a47278a509bc222481b3fd6be7c70b9485d0a022c15ef69843148b84", 0x73}], 0x6, &(0x7f0000002380)=[@cred={{0x1c, 0x1, 0x2, {r52, r54, r8}}}, @cred={{0x1c, 0x1, 0x2, {r55, r56, r60}}}, @cred={{0x1c, 0x1, 0x2, {r61, r5, r62}}}], 0x60, 0x4000}, {&(0x7f0000002400)=@abs={0x2, 0x0, 0x4e20}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002480)="38bacafbf599d9eb77c69d9221a675749ad8d72484e7f968581adb868e2966fa4e013b8642dfbef5863adc3826e4a2545bf8de7fd418d85bcbb79895ea7b6a3ae9c71e3e9dec456744a8241bebdd01f039a650c2a131a86460feada23879ae6fc9dbddb15bb7b0fa7ba2df8cd7a66d45ec6be4eb9731ead81ac4d56b7bc9c4ff1be2733d530b723199b7629103ad6957aaf50b1f33f4daed8cf40ccb18ed14ba63ffccf1c7a01b5390ecfd80", 0xac}], 0x1, &(0x7f0000002900)=[@rights={{0x28, 0x1, 0x1, [r63, r65, r66, r13, r67, r12]}}, @cred={{0x1c, 0x1, 0x2, {r68, 0xee00, r71}}}, @rights={{0x2c, 0x1, 0x1, [r72, r74, r0, r75, r76, r78, r79]}}], 0x78, 0x4000000}, {&(0x7f0000002980)=@file={0x0, './control\x00'}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)="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", 0xfe}, {&(0x7f0000002b00)="6034717d0dc0b19764a1e0c2fa8b85768719f237f0d8f42997ebb84537e9963750adf022cc5bbbbb051ef604c8f7eff9e7f632cf568ce3ad103e1d9fb0e2f0042550c02fca30e6d79db837ef80f3202b1dd261605146885a299cb256fe5058779247e7579bb35210d6a2a1986c0b0a495a4881e9739979e9dd1622ea46b4a0aa1b0ec5741536792ce60bb31b3750922129a204ba0ae519dfed3180646d621a0d0c5f20129a73af0b3d79a39be4723b36a13d01937f1464ff30e0a67a46772c578392e59bf84647811f9aacecc1c77f9e30ffa358361f51221b50bccf0219", 0xde}, {&(0x7f0000002c00)="c4c99840208e8b5804261d599422bc249ba40c1b3b5272cbd874fe968b6e70b57feea5b0c200efc881a1286f5682a2a811d4e5696447b281558606419e6f854abc5bbc769b3927135a25cfc1b391d074fe5279692f24f6860ea46723ebe9e46f910f34437083", 0x66}], 0x3, &(0x7f0000002cc0), 0x0, 0x30080011}], 0x4, 0x800) ioctl$ION_IOC_HEAP_QUERY(r13, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r13, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$DRM_IOCTL_AGP_ALLOC(r13, 0xc0206434, &(0x7f0000000040)={0x40, 0x0, 0x10000, 0x40}) ioctl$DRM_IOCTL_AGP_ALLOC(r46, 0xc0206434, &(0x7f0000000e40)={0x9, r81, 0x1, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x1ff, r82, 0x1, 0x6}) [ 682.178433] selinux_nlmsg_perm: 20 callbacks suppressed [ 682.178444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=21996 comm=syz-executor.4 09:33:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x1000, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/55, 0x37) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000280)={0x9, 0xb3d, &(0x7f0000000100)="3b9525087422b6050c41cfb395b850b924e63f6191561f2bad5493c28693d237413b6f881fdff2e17df987f51e901e6d1c8d0a094c06334b44c96f4de44d11a2294246f747b6aaa410b1fdede4073d70ed1e41f5bcd6551c1c40fcb6356d6174ab", &(0x7f00000001c0)="e961fb73f55d8602e531139bc2bbc3ec237e9c7894ea7c6731feea96614d7e5e54c483e59269fa8d332843d613c4e1fe0e7fa7147962736e3de47362461fa38ca88f0751c654bcf59a78b7f4abc701b2201246e466eeed1574248fabbf1c6b4012e5aa0e6bed918b77b4fada3e8785af74dde67d69b09a7984747acb1b48688ebe62636edfcd6b5aa1179f99e8f090524a3290b9d9d60ac0e5cf0bf76c26f54ca323beef88e55e7c8fc72a1978d8f9a9ad6c096bcdbc4d2f", 0x61, 0xb8}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) bind$isdn_base(r5, &(0x7f00000002c0)={0x22, 0x20, 0x81, 0x0, 0x20}, 0x6) 09:33:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 682.229344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22008 comm=syz-executor.4 09:33:05 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x4004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) write$fb(r0, &(0x7f0000000380)="8e5b8798bb630973884dd14bfbfdac9989a1472b03752f733112f6b62a08d4feee7e3a35c1138545e1f1582c46cf68290c63b6d678c78258b877c484e58c7fedffd822546300735adfc4bba94554ea740e6ffe69ea671b116403d67c953767332a6a27d6c480207b0e001644eed51f698f04f31a2450ed523a54b340767f6a385551d237891f63416393dff2af6881202382ecadfddb8635bea2106e116dfa80c10b393572288e20", 0xa8) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffe05}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x301000, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x40040008) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x12f}]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = accept4$nfc_llcp(r10, &(0x7f0000000440), &(0x7f0000000180)=0x60, 0x800) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r12, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r12, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r13) r14 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}}) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/policy\x00', 0x0, 0x0) r16 = syz_open_dev$rtc(&(0x7f0000000840)='/dev/rtc#\x00', 0x3, 0x200) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$KVM_CREATE_IRQCHIP(r19, 0xae60) ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x0) r20 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940)='/dev/ashmem\x00', 0x40, 0x0) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/policy\x00', 0x0, 0x0) r22 = socket$unix(0x1, 0x1, 0x0) bind$unix(r22, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r22) r23 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r22}, 0x2c, {'wfdno', 0x3d, r23}}) r24 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/ptmx\x00', 0x2000, 0x0) r25 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r25, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r25, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r26 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r26, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) io_submit(r7, 0xa, &(0x7f0000001e80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, r11, &(0x7f00000004c0)="bbeabc2ae623568f6369478171ae3c9066cd9cfad3f674471456ae55f0dcedc6d8d64c039a7de3f122741c936b15b163ceb0e1ee17ed3c16a5bdec93bde39eba2c31c4b0bb12582f884c9cde34b3d79a34ade1329f7f7e0b610b65510e3330e78ab42f3d0fb9a31fef4cef8e669f0268cf8c8e02faf75dca6b4b8afa50f59a83bcc3b7418231f8f324a58f165e11741673d5999eaa0abc02efd969d10e291be04162b55c6582cf73df847c0be6286a9cceeae13c1cef580b5bce7ad3424f536c826169053552d6bc4c5c753600", 0xcd, 0x6, 0x0, 0x0, r12}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x48, r13, &(0x7f00000005c0)="2360358817caa05782eccbda8104f26ebf46f13b16d0d6fee7a28a46015ec923f7e250568bd606b5908922bfb7e3d50f06ad257cec3c409e55950e5b151750fc860a5d373b5b2df75c522497fbd2d242ca7f016a26229755b4bdceddc775ff0e3ca77bb42ba8dc96215afbbd62ad3a7f182b6d6e51b3ad8863cfea3c066ac56960f11553ac63b1c3dba03a53dd8f0a606e8ebf70895b2a9af07e71a5e60becacbd2455470cef92c9d5584537723ae3bf0cfb19dafe1443e8bbcf42736d7ec798495086003f37e7b05f831731d94fa7a89e597dff0f5339f38b6d283ad808", 0xde, 0x40, 0x0, 0x0, r15}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x626be8cb4a8184e2, 0x4, 0xffffffffffffffff, &(0x7f0000000740)="2773f7aea23c322630ea4d478f3e71565c66c8c8ff84137c8260bec7b225254533d0eeb317d43e38650915f032fdca49251f341c4d89dedebbabb9701d43c13428077a98f70f2dcc06aafdf3de6737efa2cb8eb1aadee673cc0ae0b0de01680332d686a67c3770b288c2b9dc384ae39bb732ba7977b6f6fe248bcf411d212662222bc87562a371566b61d7f9db13ce6601e4f95844a1ab827ca53b3e5b6b3ef965415c57d084d5ec2eb01fab01696039578ddc2a041c7d3b13", 0xb9, 0x80000000}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x2, 0x7, r16, &(0x7f0000000880)="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", 0x1000, 0x3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f00000018c0)="408df45df980b8e894a32ff476b8d79f", 0x10, 0x8, 0x0, 0x2, r19}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x100, r20, &(0x7f0000001980)="d686301b0fbc0a11131f5fd24f4f9dff620601494b47a316da8fedd2ef888c0008279c028864fad400933bb93e16332959c8c35f9c5d323524d9f444b602f85bc3c3d10e7a433f95be3f803f8771229069f842097ef916583bdd3895432a44de2a7f6d7a491cde2b40a27ff66745f1315b68245e272729230c85b9b3a116c150870028128e5e4d2641750a387f384e2752af12", 0x93, 0x6, 0x0, 0x2, r21}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x2, 0xd3e, r23, &(0x7f0000001ac0)="628312e1dc294a29c4578464f307ecee87598ba15e9f5a5d9c1f208a37373c4d40270bbf3a7f3c58325eafcdb62c471b2a92b63bd5e549a9a3b1a478b47f0b42d9828b5fd7b7863b461e5703625ccebf9b477605ab07a3c51b5fd6b7b8f35fa5d201b9b36530faa0072f6b17ccd505be939346576ab98d0301d1ae3fcdc5328fd0f7873c4bc4a30cf800a92bb6fb08dda85a00570b061d4661c2f7224189155c6ebaa045155cb022c56ee6c371260b84", 0xb0, 0x0, 0x0, 0x3, r4}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x8, 0x20, r2, &(0x7f0000001bc0)="878e82aa1870376d85eeca86a45170a24e96e8d39f3a291d6048e71808e724d97ed451fb68e5a11b4638daa42b526d59f3686b775de2e5b6e7c48c9e096302f453ea20e8ed888615c0c149d13efdcf85b646ec779fb1cf10b3f66515c5f051cd6e8e6406e7f9e0c856469b610d65d024e2d36792de09dda344e7a10279cc74dabfdb433a349a6cfbbca8cfae4bd0820cce5a9e53b4c9baf3f009202a6189a7f00f1f4a997d57fc4d5e7a0c3f9c22ed064fcf18145fd79883dfc8da3e010803f573e7f4273523bf7d666a", 0xca, 0x3, 0x0, 0x1, r0}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x6, 0x9e, r24, &(0x7f0000001d40)="82ffb8b596", 0x5, 0x3, 0x0, 0x5, r25}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x2, 0x7ede, r26, &(0x7f0000001dc0)="877835a2c69b9248c0de04aa53642a4b8ed63767c2b83687bf7d5695ad85f187b61ee677c0057738f14359d88c592f94925527b2046b9d4fc9dd4db41f94349b1b5903b9b6bc6c753e7cebc3eb9f3896415849739c9ef0c8e8b1db60cb4a0118e0ea67219034580f78", 0x69, 0x10001, 0x0, 0x0, r4}]) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 682.447573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22021 comm=syz-executor.4 09:33:05 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 09:33:06 executing program 3: r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) [ 682.698647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22041 comm=syz-executor.4 09:33:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:06 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) [ 683.054933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22060 comm=syz-executor.4 09:33:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000180)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffef9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f00000001c0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000036c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000048c0)=[{{&(0x7f0000001700)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/78, 0x4e}, {&(0x7f0000001800)=""/119, 0x77}, {&(0x7f0000001880)=""/179, 0xb3}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001680)=""/59, 0x3b}], 0x5}, 0x8}, {{&(0x7f0000001a80)=@isdn, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/93, 0x5d}], 0x1, &(0x7f0000001bc0)=""/162, 0xa2}, 0xfffffffa}, {{&(0x7f0000001c80)=@can, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d00)=""/45, 0x2d}, {&(0x7f0000001d40)=""/137, 0x89}, {&(0x7f0000001e00)=""/185, 0xb9}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002000)=""/82, 0x52}, 0x1}, {{&(0x7f0000002080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002100)=""/154, 0x9a}, {&(0x7f00000021c0)=""/232, 0xe8}, {&(0x7f00000022c0)=""/188, 0xbc}, {&(0x7f0000002380)=""/107, 0x6b}, {&(0x7f00000034c0)=""/17, 0x11}, {&(0x7f0000003500)=""/104, 0x68}, {&(0x7f0000003580)=""/139, 0x8b}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/170, 0xaa}, 0x1}], 0x4, 0x2, &(0x7f0000003740)={r5, r6+10000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r7, &(0x7f00000049c0)=ANY=[@ANYBLOB="10000000da79809c6a12da1f0000a2050000deffffff7f75fdbaf4e434249ff35c40573217768a9ce1da0000fcff000000ab7a7b64d120ec69088fcd2dc2618e7fff615fddd561e80d05898000030002000000000040"], 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000016c0)={0x0, &(0x7f0000001680)}) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000001600)=0x14, 0x6b31cc07d9f35244) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000001640)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f0000000600)=""/4096, 0x1039}, {&(0x7f0000000400)=""/120, 0x4}, {&(0x7f0000000480)=""/60, 0xb8}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x8}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1c}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 09:33:06 executing program 3: r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 09:33:06 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:06 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000001) 09:33:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close(r0) r1 = open(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800, 0x0) r2 = fanotify_init(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r5}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:33:06 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000180)='./file0\x00', 0x34b3efa5f178d957, 0xc5) r1 = dup(r0) creat(&(0x7f0000000000)='./file0\x00', 0xa6) clone(0x1100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000200)=0x4) 09:33:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x42000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000), 0x2) 09:33:06 executing program 3: r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 09:33:06 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000001) [ 683.643417] EXT4-fs warning (device sda1): ext4_group_extend:1741: can't shrink FS - resize aborted 09:33:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="cc9e75bc05732c01000033e143ec1221a700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={r2, 0x2}, &(0x7f00000002c0)=0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x3f, 0x0, 0x1000}, 0x10) sysinfo(0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x421b, 0x0, 0x0, 0x3ff}, &(0x7f0000000240)=0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000340)={0x3, r7, 0x1}) readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 09:33:09 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000001) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x0, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4$bt_l2cap(r8, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x100000) r10 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) write$cgroup_pid(r14, &(0x7f0000000200)=0xffffffffffffffff, 0x12) write$FUSE_DIRENTPLUS(r11, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r9, &(0x7f00000001c0)={r10, r11, 0xd}) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x3b5) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) rmdir(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:33:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x24) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000200)=0xfc6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$9p_unix(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472e66e733d756e69782c76657273696f6e3d39"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x80082102, &(0x7f00000001c0)=r4) 09:33:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpgrp(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2c200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 09:33:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x7177c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7a00, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0900001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800270005000000"], 0x3c}}, 0x0) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x0, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) [ 685.939454] 9pnet: Unknown protocol version 9 09:33:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getpid() r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7, @mcast1, 0x9}, @in={0x2, 0x4e24, @remote}], 0x2c) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r3 = fanotify_init(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000200)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x3}, @in6={0xa, 0x4e20, 0x1, @empty, 0x6}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={r4, 0x8}, &(0x7f0000000340)=0x8) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 09:33:09 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000001) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x0, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 09:33:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0xacf19a1555ac5b4a}) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x1ff}, 0x1}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xdba264822c44e3b3}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r6, 0x61df75fa300c90e4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000898}, 0x4000) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4080, 0x0) getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ptrace$cont(0x20, r4, 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x3) r5 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000380)=""/4096) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000300)) 09:33:09 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x20, 0x10001}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 09:33:09 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000001) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:33:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3e5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:09 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000001) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e9e50000633d66642c72661d018934", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 09:33:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:09 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) [ 686.742221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22223 comm=syz-executor.4 09:33:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) getgid() syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:10 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x20, 0x10001}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 09:33:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="62ff31ce6d952d8118f4d724cbaa89dc", 0x10) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74b0b4c6018ecf691e7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) 09:33:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4000, 0x30) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r2}, 0x10) 09:33:12 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x20, 0x10001}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 09:33:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x4, 0x3, 0x8}, 0x1ff}}, 0x18) mmap$dsp(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1bee0557eaa9af682d7aaefd7a131afc61697391bacd3acf97cdd1edb626d09740070b4589"]) 09:33:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 09:33:12 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bind$ax25(r6, &(0x7f0000000400)={{0x3, @null, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000daffff0e04b2e24139ae1eff0000000000000400"], 0x10) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x201}, {r0, 0x2000}, {r3, 0x424}], 0x3, &(0x7f0000000180)={r7, r8+30000000}, &(0x7f0000000300)={0x4f7}, 0x8) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r9, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) tkill(r9, 0x3c) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r9, 0x0, 0x0) [ 689.491606] 9pnet: Insufficient options for proto=fd 09:33:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x20, 0x101000) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:33:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, 0x0) [ 689.543556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22272 comm=syz-executor.4 09:33:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) munmap(&(0x7f0000fe9000/0x4000)=nil, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) symlinkat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r1, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 09:33:13 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x20, 0x10001}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 09:33:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, 0x0) 09:33:13 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d0100feae66a657e566", @ANYRESHEX=r0, @ANYRESOCT, @ANYRESHEX=r1, @ANYBLOB="0f00"]) 09:33:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x408, 0x47504a4d, 0x20, 0x801, 0x8b993bb88aeee9b0, @discrete={0x800, 0x36}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x40, 0x4) [ 689.885233] 9pnet: Could not find request transport:  09:33:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, 0x0) [ 689.940207] 9pnet: Could not find request transport:  09:33:13 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x20, 0x10001}, 0xc) 09:33:13 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) [ 690.349617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22331 comm=syz-executor.4 09:33:15 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, &(0x7f0000329fd8)) 09:33:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000000)={0xd, 0x0, 0x4, {0x4, 0x20, 0x1, 0x8}}) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close(r1) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0x0, r4, 0x0) getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r8, 0x13) syz_open_procfs(r8, &(0x7f0000000040)='clear_refs\x00') r9 = dup(0xffffffffffffffff) write$UHID_DESTROY(r9, &(0x7f0000000080), 0xfff2) recvmmsg(r9, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x3, 0x5}, 0x0) r11 = syz_open_dev$cec(0x0, 0x2, 0x2) write$selinux_load(r11, &(0x7f0000000d80)=ANY=[@ANYRES64], 0x8) r12 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x17a) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r13, 0x0, 0x0) getpgrp(0x0) 09:33:15 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000a}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r8, 0x6db73bd41e770ec7, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1ca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x1) 09:33:15 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000da00"/16], 0x10) vmsplice(r2, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r8, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @empty}, @in=@local, 0x4e21, 0x0, 0x4e20, 0x48, 0x2, 0x1c0, 0x10, 0x16, r6, r8}, {0x80000000, 0xfffffffffffff800, 0xca, 0xf41, 0x100000000, 0x7, 0x80, 0x7d}, {0x5, 0x2, 0xff, 0x7fff}, 0x7fff, 0x6e6bb4, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={[], [], @remote}, 0x4d6, 0x2b}, 0xa, @in6=@rand_addr="550845b315e0049a76689b21fa6fc63a", 0x3507, 0x3, 0x3, 0x1f, 0xfffffff8, 0x9, 0x7f}}, 0xe8) ptrace$setopts(0x4206, r1, 0x0, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r9, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000140)) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) getpriority(0x1, r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:15 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, &(0x7f0000329fd8)) [ 692.630285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22340 comm=syz-executor.4 09:33:16 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:16 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x0, &(0x7f0000329fd8)) 09:33:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loox-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x21, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) signalfd(r7, &(0x7f00000000c0)={0x2}, 0x8) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:16 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x1, &(0x7f0000329fd8)=[0x0]) [ 692.894749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22378 comm=syz-executor.4 09:33:16 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f00000012c0)=""/85, 0x55}, 0x80000000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r3 = fanotify_init(0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x6, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d1d, &(0x7f0000001380)=0x63) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00']) 09:33:16 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000fec000/0x2000)=nil}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r5) r6 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfJno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) fcntl$notify(r5, 0x402, 0x29) 09:33:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x1, &(0x7f0000329fd8)=[0x0]) [ 693.431940] 9pnet: Insufficient options for proto=fd [ 693.452499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22407 comm=syz-executor.4 [ 693.482774] 9pnet: Insufficient options for proto=fd 09:33:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x16) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:18 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x80) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) fsetxattr(r2, &(0x7f0000000040)=@random={'osx.', 'wfdno'}, &(0x7f0000000080)='wfdno', 0x5, 0x1) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 09:33:18 executing program 3: socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r0, 0x1, &(0x7f0000329fd8)=[0x0]) 09:33:18 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 09:33:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x3, 'rose0\x00', {0x20}, 0x5}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:19 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 09:33:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_DEASSIGN_DEV_IRQ(r6, 0x4040ae75, &(0x7f00000001c0)={0x9, 0x10000, 0x4, 0x506}) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1801000f3f7aa1dd00", @ANYRES16=r7, @ANYBLOB="000827bd7000fedbdf250a00000048000100080002002b00000008000900030000000c000700040000001000000014000300e000000100000000000000000000000008000100020000000c0006006c626c63720000000c0001000800010002000000080006007f0000006c00030014000600000000000000000000000000000000000800030001000000080007004e23000008000400000400000800080000000000080008000000000014000600ff010000000000000000000000000001080004004000000008004a0006000000080007004e2400003c00030014000600fe8000000000000000000000000000aa08000500ac1414aa080003000300000014000600fe880000000000000000000000000001"], 0x118}, 0x1, 0x0, 0x0, 0x2}, 0x1) 09:33:19 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) [ 695.734461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22428 comm=syz-executor.4 09:33:19 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:19 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 09:33:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e00, @local}, @in6={0xa, 0x4e23, 0x101, @local, 0xffffffe0}], 0x3c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 695.942656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22456 comm=syz-executor.4 09:33:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) process_vm_writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000800)=""/16, 0x10}, {&(0x7f0000000840)=""/83, 0x53}], 0x9, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/163, 0xa3}, {&(0x7f0000000a40)=""/210, 0xd2}, {&(0x7f0000000b40)=""/55, 0x37}, {&(0x7f0000000b80)=""/20, 0x14}, {&(0x7f0000000bc0)=""/176, 0xb0}, {&(0x7f0000000c80)=""/80, 0x50}], 0x6, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000d80)={0xfffffffffffffff0, 0x0, 0xc, {0x7, 0x1f, 0x4088, 0x0, 0x4, 0x7ff, 0xffffffff}}, 0x50) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x6, 0x0) 09:33:22 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 09:33:22 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 09:33:22 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/deol\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r8, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x800, 0x7ff, 0x8b993bb88aeee9b0, @discrete={0x104, 0x4}}) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r10, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f00000001c0)=""/246) mq_unlink(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00') syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f0000000140)={0x7b, 0xffff, 0x1000, 0x8, 0x1}) 09:33:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00D']) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x3f, 0x4) 09:33:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) [ 698.745759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22486 comm=syz-executor.4 09:33:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x3f}, 0x2) r2 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 09:33:22 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 09:33:22 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 699.037109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22518 comm=syz-executor.4 09:33:25 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x20000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:33:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x101080) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 09:33:25 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x7, 0xd0, 0x1f, 0x1f, 0xc2, 0x1f, 0x1, 0x7, 0x1, 0x1c, 0x8, 0x58, 0x3, 0x52}, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mq_getsetattr(r7, &(0x7f0000000140)={0x4, 0x1, 0xd565, 0x7fff}, 0x0) [ 701.819579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22549 comm=syz-executor.4 09:33:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 09:33:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = fanotify_init(0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000300)={0x7, [0x80000000, 0x6, 0xc, 0x4, 0x54, 0x6, 0x4]}) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @ib={0x1b, 0x2, 0x9, {"47990562c3d8434412b5ba3f0eb8ae3a"}, 0xffffffff, 0x0, 0x26dd}}}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'\x9eV\x00\x00\xf1\x00', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r7}}]}}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r8, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SOUND_OLD_MIXER_INFO(r8, 0x80304d65, &(0x7f00000002c0)) 09:33:25 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:25 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe0000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x384) 09:33:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x22c240, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:33:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 702.043376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22581 comm=syz-executor.4 09:33:25 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:25 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) 09:33:25 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffee6}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 09:33:28 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:28 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:28 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x128, 0x0, "8427daa7575fcbe58214b7a829acff79b74d5c7fc16302e3adc1714f07df2d7f4e3383aeb7ab1be358a67be8fd252a4b9e63541600c7aa880c5f2824466b2120eff07d67936a20bc00"}, 0xd8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000980)={0x0, &(0x7f0000000480)=[&(0x7f0000000700)="73aa4958e32c1612125c78b981f8bcfe8149186b3f19fe1617c18a5a77bb655ec69a0b9072eeb50528432bd745ea5d8c82058d7162df9cfbc20719e6785456f351a054ee1e2ba7e5b23deb80077144713dda514dce636828e02184dae4cdc161f48e7789cb598a836f06d6ee7f382134142a2903735016a6132bb45f38ebbccb3cab525b2f456857de6b3bc1f4be609b90e2f7ff11fb70609046e415e3e10e4d82603f5ea8eb7540ae3326367b5b9d550c586598fb6f62930586495d287cad0d5c6d56d48c21f105889d28054421e296f4611f287b334a2a0178cc5ceb6cd1490d97dc82e75093351af9ad1394a681", &(0x7f0000000300)="217d089a11e6ea57b581bc9c433f741f77f9156e427b9e9c27ffba95", &(0x7f0000000500)="7ee3c477c22e69996def1eba0632af0f4f9562cb3c736e832769f9f90c4c8c00c39a8f3d2980fc15e115e0efbd19ca8b402b5a14c9b4347ed2db4cefa014626a923828178397184e2f0f4159e0693a2abaae0ecd438247f994353a525db1865c37043def31f51124d8506034d8e0ed724c2a83f9cedc91a6c1fff6d87e3b5d0908e72892dc38690047674e1730d6d1feac61934744117eeaeeab3f9b5909905b68885a536256752dab4086d793", &(0x7f0000000800)="7f65a14055861fe461e75f1961d03472d8dd06ce8cf054d317b57f2cddd6db6b582ceb0f41165b94323822027305fb4674265620c695d9c50b01a1434449d41f4241836382542738", &(0x7f0000000880)="e4733c27c71549affb8d4afb2fb1609112919957eb812de4d9d55b917370d7c9ab518ddfd8300591fab50c72becf3f6f806aa6207a3a3a41ed846f2b297be7e9f53d3513366422222ec61e1e82d75e759b9b8f880db4eb1b552e95a975c7e9903a16dfeb834326ed27cc5a990984eeadf6b8bb782168c8772ba4371d544faf954b916463f300bd8c6395c99e99c0a7774b2f718cfe5df6055439c1eba6ebc86ebf5ba213ab4ffa30f7b06cf19f6ec8900c5cbbfd1ed2f253b4dde6c57b0499c0bef8c8121f7283d9f257fc994a", &(0x7f0000000340)="4ad62d0ce0c5330c4b36e3cfbf0fd9aa3d8c7966bd62583de780a2a6a27848"]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) connect$caif(r6, &(0x7f00000009c0)=@util={0x25, "717acb9d2a7eeaa398c6d67add8deec9"}, 0x18) r7 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getpeername$netrom(r7, &(0x7f0000000380)={{0x3, @null}, [@netrom, @default, @netrom, @null, @remote, @null, @default, @default]}, &(0x7f00000001c0)=0x48) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000400)={0x8000, 0x2, 0x6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="f7e68300000000d1e1c4815683b405739df13d5cba2efed6ecf3899a8b642ef57d1dcb1d1a55e1cf1e1f6726c26a13c126ed44f1edb3fdfdc537c71a391ce8af350ce2ff6af1489fcc1538f9858ef454e891c552ca3b0152fd0d0d1154714405fd540a3eebf0147d88f81213890b290a1e1bb64fae229cbe3cb96d016cf12426aa663847566d63d345c2acd5727311eca81e35478fd2867f01d09b58b6cb1ae0ae16fa214c5236625e53f3d60736d1ecc16fcd0e485897cae84d26650b2aa4adc1f536f1d4a626b4c20177d6d10ba022ea", @ANYRESHEX=r2, @ANYBLOB=',wfdnPc', @ANYRESHEX=r3, @ANYBLOB="bc385486647b6fb0f9ffce62ce8f18562699b5f8d463cbcbe7c5e2236931c056a5879929fd668f7a9ede45458ff008f330afa252906a2462e679ba155154281762b69fe488a02a380177dcb9b313c36a13d60446bfd3ae00145d996209d769d98d9787ad29217919870ad0fe504b170686709a"]) 09:33:28 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:28 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fchmod(r2, 0x0) mlockall(0xe) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r5 = fanotify_init(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdko-', @ANYRESHEX=r5, @ANYBLOB=',\x00']) 09:33:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x100) setsockopt$inet_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000140)="1d57784509729d654dd0588b334b74e6f4a3c86a2610e4c66f2727ff7898432b0dbcf925b2d4dfc998f32f1d961d0d301bb379e916041361e6ab377eb9044077bcd4a4ef70df28fab215e37987b206fb592f86", 0x53) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:28 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r3) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f00000000c0)="805dd7400b5df2e0d9e0185afd518c6dfa1ea5552ebe9849ba1070e8fb8bf79da21c576a0ae857eefe4c209cb55d0a389c3f3e43012c124b36f94dcf63e778d2cbe49691dcfadac2fc01392ab04d3532ea821a16b77746c25ab385aa47cb93ef8fb8d776b3b5") r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 705.028981] 9pnet: Insufficient options for proto=fd [ 705.038041] FAT-fs (loop3): invalid media value (0x00) 09:33:28 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:28 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80100) accept4$alg(r4, 0x0, 0x0, 0x800) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 705.082106] FAT-fs (loop3): Can't find a valid FAT filesystem 09:33:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="03542c0030db5638125ac750a5205b3ec28fc5a82e3e970c66b4c32e54d7ef30d3633301df1141a3e2e66fcd41da896d54963c05fb9e129b4a24ce764072e00fd667129848cd83f51baa9038"]) 09:33:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) timer_create(0xb, &(0x7f0000000000)={0x0, 0x2f, 0x3, @tid=r1}, &(0x7f0000000180)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) ptrace$cont(0x7, r2, 0x8, 0x3f) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 705.267280] 9pnet: Insufficient options for proto=fd 09:33:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x9}, 0xfffffffffffffe3c) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 705.299910] ptrace attach of "/root/syz-executor.0"[22691] was attempted by "/root/syz-executor.0"[22689] 09:33:28 executing program 4: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 09:33:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB='56']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000003c0)="0f0017c4c10d57b56718db6766f00fb353090f01c4673e672e260f09c4e07c5ee53e0f01dff2640f07f26f0f20d8650fc77ea20f22d8", 0xfffffffffffffd19}], 0x0, 0x1, 0x0, 0xffffffffffffffc8) syz_open_dev$midi(0x0, 0x0, 0x0) socket(0x0, 0x400020000000802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5], [0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x8de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b00140000fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="167416f02e4eb0bda562094200736d9e3a4045190ccab400808789610c69675c8d8ba96f33866f5199a1b5f53b39f2ab2403e24f9250d04d92951b7d998ae705077f5595e73a3df795d161ef2b43470d3cb873fb03d68e4efb755248b976366617f508"], 0x0) lseek(0xffffffffffffffff, 0x20400001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x743297c793d43ea6, 0x4, 0x1, 0x0, 0x1}) setfsuid(r1) setfsuid(0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r8) 09:33:28 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000300)={0x3, 'tunl0\x00', {0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:28 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$dupfd(r4, 0x0, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:28 executing program 4: open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) [ 705.476068] FAT-fs (loop3): invalid media value (0x00) [ 705.491603] FAT-fs (loop3): Can't find a valid FAT filesystem [ 705.703388] audit: type=1804 audit(1577007209.019:167): pid=22722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/335/file0" dev="sda1" ino=17437 res=1 [ 705.742970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22722 comm=syz-executor.4 09:33:29 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:29 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$dupfd(r4, 0x0, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r6, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:29 executing program 1: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="3c9520002f10a19ff64135588191012d25ceee4d8237458f54b646754789e5f77e723835e56d4c35635f3a2acf30b9253c6e961751789c42ea615de6443fd4e7d1fa8fec952d701962825851c052c972809af67b22169df3297f", 0x5a}, {&(0x7f0000000200)="6a52ef6fc9fbc7594c5bd4ae325e86d6043bd0fa688706ea894eb049e177bacdc5e53861655a70729e7ba85f17ca2974c8ece7418deb853ffda00f62f7f50c197e6c0831ff40190c1108b8cde5eb227d97d747ae90a5969c83c1c51b3ef6a88533d1a4a6763b376d94ad43ccb17d25539bf04a026c61214e51948d2a5110206500cacce8420077dd596eb870439d779647737e89d4b194e346e258da16991030ad8beb14630441c1812904bf9c76ec3e40c42b9407c64cc9c1af096c1fa2891b80402c4ab2f1d321fbcc1c1085c8e5d7b120b46d7cded94e20925f2702e55793f105103743e0cd978f6f", 0xea}, {&(0x7f0000000300)="8d86f46de13884bbb4ee23fdbc149f8a50577f85fdc663dd908115ce462a4c352e0bdf3f278392b0c2723547dbabcc5432e5863510c76637958d9e1e427acdf761937bedab9ff73378287857b5f0be4f4518da316d4ff1848d5ef2de37e1547c03c0c13aadf492930ca980689e94613c197192cf3079fca4cbde8948a7c5a86bd04778d2c567bf240fc51f739b", 0x8d}, {&(0x7f00000003c0)="99b7634b31c1acf298a4685c8e4c012555e7aeb3fb3f1e31fb77ae447163c03375b3d2d6e8caa5b4e99205f8db4e674c37d72070a791e72e54b41a3bde58c2ca037be2b0b944cf2a753c2641c545aeb9fbdb00fac120c2a45f8eabf67d01706b7c2f", 0x62}, {&(0x7f0000000440)="3871621daecde219487908318e2452d818f13c4118834cb8705dd2714ef190c81ecda5bce4ffc49cb355d5e3d1e980b22395512a13b85a5e9be193ab7694c436a5f6cbe6a7df827c3e0b077e0215405a4d35fc4fe7063a602ddb2adea5d24fd47d99861f0d55e871177217a1066ba3a4eee9e7ffaf7490d16160127bed2a13291cbe8e5a65f5dc3c4cc7bfc3ef75ce9f2be283aab668d7f8f0a620269e0c5e0a27cc1a9482649b1bfa44638b0e7f4f32724e9877d8a2096bf044f6326f651bbc2d3e5e4a0888b7fc3e49ac56f24aaa1d975a4b4b8616c6bef78c5ef4bc0bf214", 0xe0}, {&(0x7f0000000540)="65c248c77fab0a3ff05717d3fbbcb1314cc48dbbcfef97bfda60dccac6aa62c21c3c", 0x22}, {&(0x7f0000000580)="ee440ee31277ab1a6a0c22f600f5af3bf45f1319613cb03dec7bf67e0299ad50770dd3beb08eb6bb5d2593f286a5afce09d3f85eff5229adfcd587244c0f85776e21a9788228b578a421d4a435c871e1a341f05f11f31b51919116cae77775ee82bb69b1d212b48859384e74420a12fc11a2c26f208c686a07cb7968157dbbbb1e978f1d5a2d5296bccd800090acd18809a1f9a54a2586950562781149d4aa52c5e807b3a18bb8fd015a45420dd9", 0xae}], 0x7, &(0x7f00000006c0)=[@authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x3, 0x0, 0x6, 0x54}}], 0x30, 0x4000}, 0x80) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) rename(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000780)='\xe9\x1fq\x89Y\x1e\x923aK\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='irlan0\x00', 0x10) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:33:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000000)=0x5) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xa9ab12cb288ffad7, 0x0, 0x0) [ 705.977401] FAT-fs (loop3): invalid media value (0x00) [ 705.989813] FAT-fs (loop3): Can't find a valid FAT filesystem 09:33:29 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r5 = fanotify_init(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)="1db8696dc809ab7fe17f0b0b38cf73bb15130d2bfcaab4da76d36cbdb02002dce7282a99ccdcb0576a9872c707808d240d0ecb666c5c9267f12d91a432b3423a0c50970dc54b25762c54cf38585a59442526212543db977a1bb5c2ab1871337510dcd485e27e924406377352739cf8dd8c94277e463b1f9295fb74baab039742e333bea8a4ef955275cc4752287d7d63c9a9d9a8430d1a9dd60c122e058226e3565edf666dcf7bce497bf32599125db19ed5da382de8f89ff30eeec33da933a609b85092e726451ba08656a8720c205076f71ccc2e76f4faf142f51a3b5acdfcfb84", 0xe2}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="8cea32a73d25c935c608b88dbb5aa1448714f4ee51a03624fcabd794322d30277d874431e0ef9e7ec4d31597cd4f48dd5c69d57fc9cfd415b2c87c7470f9f20ce3ca9d5b504cfa57eabb9a14035c47679bf370e000d08ae3503a1bbbd4bebb4a2784504e0078588cd4948071ea3e54ca6e7b6de6e39985ac10db55bb33e11f7e4e774e904705d781", 0x88}, {&(0x7f0000000300)="3f1dea38b1ca3bf3585608bceb00671206e17c24a15c51758c4d1c2e92a608574d2cd28045e37d832612fc11079f6e70147d429d6b21cc6586cace3fdc8e7ba68f31171c629cda2d82068b643b206beb144cc58bb3de7b4e417c6677ba892effeaf242a7a2d182dea85096f5b1f8b4ae2961fccd12f79f0beb924fc23c213813a5d97f3c70f00cf42169eabea8629a2cb961701879895a305364468fbbb472bf6533789a9739c253ca68f10f6b2b63c4028feb2f19d2d11ae004a004def91a7fe0db9e3f30653af8f1707a9d06313bc8c61324079f78c784ffe488f0deb98e65b73c0ed9c9e9b72359644bea85d186fafd5813f69d5a0a5137", 0xf9}, {&(0x7f0000000400)="4eb90b900f2ee511025f1654b0357725f4790133b490aa", 0x17}, {&(0x7f0000000440)="350aab1eba099c8e318b640fa1400eb51460bc49e732885f8dc6ec03e79f54f2287e0cecfa30387a0f57922f7f63cc7476e16737aba92830de2e30de99dc90a1255f34b31fe58ebf075fa0c72ad5927f5b5cbf19cc2a695114cb8044ad3556324331a9f3", 0x64}, {&(0x7f0000001500)="5b6ec6e36fad5f1badfe76eefeac6954b2187911bb03323e2d180aefa9ef544b8e13e5fc8d621c9a2171c7dee0a822e53decd91241c224603f28da1ccb25061a49de2265454e1acb2b90bd5d39afc79694dd7b2e2d6826cb1a98e235163ab0640fe9c98420b4688eb46db5d59f1baced89912298e46c3557502ee8044903caae59e71dc84ca0f05307308a1b07b537ca17357f010820f2f4cdfd72a5fd2fcf10af14163610d812a5f0d5160b7ca89d59d7aaed5f22caeb689205636135a273061ce0ffb02b58b20dcf5f0f61a571a64014cfcb8a734ffdb243c206286d0e2db3b9291d4b1a164ba7cc947eb63c700be6f5d10e411ceccc31e4", 0xf9}, {&(0x7f0000001600)="db485fd171a862f753c5f318d3b56944a504c9db67cb8244260c1881e7138541bc3d88f7d058a7aa29d765ce195b9b107b0d2a74b77a2731c11815fb1570b344445863ac143cd7cb55e964f6e31ed12ab2c0d6fecff80784621360126a367c4facfbece9cfa88255ad69d817d80fb94c20d5e312fe3ca22af5392ef2e8e4c1191c2ed6605f48f656117f046f1aa3f951f5586ef5111ee9adb47cb9c32521108fbb0b9331e596155b9f", 0xa9}], 0x8, &(0x7f0000001740)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x8f20addb73f3aa61}, @iv={0x90, 0x117, 0x2, 0x77, "8b6d75d5fa936c8657e83c61296efc93d51fb65fc7ad1f28458d17dd57c322f60c182197f083bdc0604ca4dff97085515dc998733b9f9303a7b5ecdeaef62413b0ddd7409c70460c991780361de25dfa814645b232910dd0bf5e379565dff219e54151c2553ed63d43ebbf5db2c38ad98df7c97bbcec66"}, @iv={0xf0, 0x117, 0x2, 0xd5, "fe888644066806f4798f4e2f619ce97c171aee5c97ab9556722fcc116fc1b4c1dfbd1b798a3f963915c8c4ecefb9326d95dc7731c22f0e11e1247afc15509e0148b93d58e0a8062fe2ff633b74217126e438308c11d45063b0c2a1c23e14134d385b381835e04498f5bfc476fc73b8d434842ffccf47e553e27f493f83a2280e61c543c3c6146bef12fb051cd0ff46e914fcfcdfc4a62bf9234a7415405910e90bd54696a354e40407baa8cb77cd822cabe029f8b476fd3da33c9ea6bb88d795cca5e81a62791f5a3b3e706a6ea3b3bbcc23ef8608"}, @assoc={0x18, 0x117, 0x4, 0x78c4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xa6, "e7d40514ec9f5de8c1be9100e84450b267c7e4175213b64ad101c13c1d50fef1e8cb191920e2f34aa39d90ad349b722fcbbf3b4791bb8b5837db28c88f8a3e1c0b147040325c23d710e16da3124ca2596ec9b6cb21fef0d902834a4417229722e1b8840d20f7a9f3e215bdafc261caf27b7165e9d8eb4d15fa49a20ce9c116f507f925ea28502404b0217d2cc362692072844dfb42b0dcb8e6425ce1b21ccf322b442c6c72d0"}], 0x2a0, 0x20000}, {0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001a00)="da00e3fd828c3ff1360db68f10ba3d66a3eca0b859df61e6c59a12", 0x1b}, {&(0x7f0000001a40)="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", 0xfd}, {&(0x7f0000001b40)="5bffa5b7ffeef1b417791ca5deab6447c1d0ab74f2411324455463ed97cb7f9e96717c4c62fbce33eeea0b45d7a9bbe04e3b2f0ae759032793d642ad298c5bc4cf03b582dc4f93f6ebc4f2aa60a7edfd8e3cccd47f774ce3a6ad605ab1dbbb467be8f1ad5fda2f9ddbca1dd0737942f434a4001f827c9c2faf284993b6c67fee9854aeb2af1864f24990085b6330b87b2445b22cd1cffc52b3474802e397351676c07d5b590d6d2b2da45eca7a283ad2851f29613e1fd66923cdc896b35f156abcd85e249f0af1473e179b5a84c2a277fcf877", 0xd3}, {&(0x7f0000001c40)="cfe01d21ebde7260083299f7c32c607d58b28fd735ed898d8ab62202b34fb5c217ae6ce5cc031703d7c2f67e007ad45d57f8b6076e", 0x35}, {&(0x7f0000001c80)="3035da552490df5012f66539f64869411485ba461da7b6a31ecb0b88b1459f", 0x1f}, {&(0x7f0000001cc0)="cadb9de8bf338d85a69c87e831535219fc293b12086ae64218c9e4f83d3946982b72ef563b352ef5dcb15e0519e7a546ad8e7639b3208da4784c5fd7f6d128ee3f2522de1bcd8556e20b36d77958c261523f45700dad1392aeb626ddcb30216d63c120143ad0be92409f0cab41a61629cf2b43fdced54cb1fd96fce71bed73764c9b48c1bf50001ee584f87cd030eb736401eeea314bdf78aaec7e0821be3b240acea43383b1fb9982d4ed456959ff1325", 0xb1}, {&(0x7f0000001d80)="5557285997201b3ec2d66f01caddfebde341dafb4f1c340d29692bdec56920f032d44247e6556391a653f4f1e5d28c4fe0c464936a47fba6734f10143c5110fd3ce85d5275a0990aae416c42921b859d0f8f3071b5b4fa1c3832f4e4e00c70695679bd5c93faf129f501cd5fb48c25ad1cea25a30f1bd342127c0ca298d029ef442de9466ff8573db07e2f66165902697bc645d3f8db3af6a37570bf60bb7285daea017441ee50", 0xa7}], 0x7, &(0x7f0000001ec0)=[@iv={0xb0, 0x117, 0x2, 0x9c, "82492dc911d4a669f1644f6a27f4f0711944fc63cec6a95632496c532ea4a4659bffc2751ab9f35e5df1adc3d734ee5e3e49a79ceeeddbe902546bf612241f1865207166cd7b8fa0f47f34cea1acd479b880544ce8a3452a8a30507622d42359d841ae7751aadba0e023ffd6f7ece5c1473958cb516c07a0ade6ae35633cb1fdefcb5f10083e6615aeeb16f0bcbdb0ca43f72b5ad10ca3ab06a28068"}, @assoc={0x18, 0x117, 0x4, 0x40000000}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xd8, 0x117, 0x2, 0xc0, "49eaa283aac2e916e6945b262b6e272a4160fd092dcdc3c4ddb407fa0b73e2dbaa7e2bc76143b2e7f8bc61093f57234f7f6640c07ec403e9ad3400b90d9991505ba920d9a93e273a9bfea431b8686fa810c8d78261d24f353bd8955297af54ed704deaa189b1bf206361707f3192c3a25ab5376254f8755133dcd5b2e202bf3140bd35e77fecc67314801d65752244d0e71fd9cec4b973775f5ed52e1e79602946c6d14a65f00e109599ccbb240a7ae4e5373571f68d4ba44f9cd51083c303a7"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x400}], 0x200, 0x80}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000020c0)="d7a0b3ecd9fcabef80e85293b60dd52ce1c87f6e767adc566b8e78984c0cd96828", 0x21}, {&(0x7f0000002100)="5b5d555b645f9b8f9f41e2dab73ee338132c26f56390dd7df8cbedd6a1af8007858dfb6db50e80a4f1a45c21bfa8966903e7bf70074d23a6249e167257ee3808b99df19da998ef1971ee02eb06950532d10f493d0b470556c6590c9e2207470b67faab76c403a302f1cd832f3203c16086b13dbc536308448ffc1e955357f18d51b4ad1bd9339bb1f3e7e0835f8caa3645507927d6b70c7ab4d95cefab262f8606f84f779786be382e5a03fdca10f9a88b9e40f320c91baa163c715ae07f29d9953089eab3d1172ea3899f9b31b0404e5f4b2a3cb66205634a8a162038cc77cbb1a5e696a75954e004", 0xe9}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000002200)="0175a9d2b19bc917fb49e3e8537c1bca0824314c4c8bfe9b63984a46b2bf337a921d488f6e219853f687bd67e197c84d49c128c4723a56eed96ee0612d4fdba457825751d9dd1094cff6873d2d749278ab8d8a2daed4af7d3b0fc6e485b1ac3d1569640b1c8996bc6432c6d83259d831cf5f360a20f00c589336f5fd13255513171e904abe11dc66c375f79d1700959e0cca29fe14aa6d4ebc85dd8286dd49dc69b694f93e5638e2998be6cd10b87b92d6f2e48c0bf61c7453f5dad4b33570c4817b0f488dc7f9", 0xfffffffffffffc6c}, {&(0x7f0000002300)="e55136f2fbd7777154f6b0a55687dd9cb716cd004257385d50a4f7719ca7163c9a246db657840e2bdf4a96e9dcf8b1df86e8408c43d5290976eba8f3346b2950655ef1454d4d3b1f667fcc5d72af3463306b9d8b0b41aa3560e906fdeda30d5778cf8ef54562f2fdc115dd955ee8802211a81f85e9d540b8f0164c555d9f2a3bc7aedf75a593bf464867e46579fe2f161ca289d9f664d0af859dab8b676e7cfb19f1be9f965081310449920a412ac082672ba23cdc282cdd12911761df3ff19d927c525cad20d8f0b807d9c39ce5134e3ab81beaabc56efcfdbf8378b56bf044", 0xe0}], 0x5, &(0x7f0000002480)=[@iv={0x90, 0x117, 0x2, 0x7b, "56c2d8fa662cfde8a323649cee03c4ea85a9557aa0d802d0e20ada821d2d978f6b349b8b6a8607ef1e703f98bcf6a355e39c45a84df8f1fca891f11617bf5d8aeea3c21d53606e98a5aa784cb49a5e0200df64075e1ecbbf4f9a5e3e4a535eaea286c6dced95569481d3e06b4e7298dcee011866df4e40e5112372"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0xa8, 0x8}], 0x3, 0x880) accept4$alg(r4, 0x0, 0x0, 0x100000) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 09:33:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:33:31 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/\x05\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:31 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB='56']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000003c0)="0f0017c4c10d57b56718db6766f00fb353090f01c4673e672e260f09c4e07c5ee53e0f01dff2640f07f26f0f20d8650fc77ea20f22d8", 0xfffffffffffffd19}], 0x0, 0x1, 0x0, 0xffffffffffffffc8) syz_open_dev$midi(0x0, 0x0, 0x0) socket(0x0, 0x400020000000802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5], [0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x8de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b00140000fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="167416f02e4eb0bda562094200736d9e3a4045190ccab400808789610c69675c8d8ba96f33866f5199a1b5f53b39f2ab2403e24f9250d04d92951b7d998ae705077f5595e73a3df795d161ef2b43470d3cb873fb03d68e4efb755248b976366617f508"], 0x0) lseek(0xffffffffffffffff, 0x20400001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x743297c793d43ea6, 0x4, 0x1, 0x0, 0x1}) setfsuid(r1) setfsuid(0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r8) 09:33:31 executing program 4: open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0xb4f1efbf6da6a637, 0xc1000) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 708.333417] 9pnet: Insufficient options for proto=fd 09:33:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66e9576bc8112832ade045d3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 09:33:31 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x1, @dev={[], 0xe}}, 0x82, {0x2, 0x4e21, @rand_addr=0x5}, 'sit0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000180), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000180)={r10}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000000c0)={r10, 0x7fffffff}, 0x8) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) [ 708.404751] audit: type=1804 audit(1577007211.729:168): pid=22782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/336/file0" dev="sda1" ino=17465 res=1 09:33:31 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 708.445426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22782 comm=syz-executor.4 09:33:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0xc835, 0xa6ce, 0x3a25, 0x9000, 0x80000001}) [ 708.512158] 9pnet: Could not find request transport: féWkÈ(2­àEÓ0x0000000000000003 [ 708.550119] protocol 88fb is buggy, dev hsr_slave_0 [ 708.555268] protocol 88fb is buggy, dev hsr_slave_1 [ 708.560404] protocol 88fb is buggy, dev hsr_slave_0 [ 708.565462] protocol 88fb is buggy, dev hsr_slave_1 09:33:31 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:32 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)={0x10, 0xffffffffffffffda}, 0x10) fcntl$dupfd(r5, 0x0, r3) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffffffffffeb, 0x22, 0x0, 0x0) [ 708.630130] protocol 88fb is buggy, dev hsr_slave_0 [ 708.635249] protocol 88fb is buggy, dev hsr_slave_1 09:33:34 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:34 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:34 executing program 4: open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:34 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xbe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000100)={{0x98, 0x40, 0x1, 0x1, 0x0, 0x8}, 0xfffffffe, 0xdf, 0x7f}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204040, 0x0) r4 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 09:33:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00;N\xb2?]\xdfL\x92\xb1\xd5\xd0^\xac\xf9\xce!\x9c\xbd!\xef\xbf\'\xb1hg\xcb\xca\xc9S\x98*\xa2\xc1\\\xfd\xc8\\\x82\x89\x7f\x9d\f\xa3/\xba\xd1\xcdA\xd6n\xcb/\xed/\xbb\x99(U\xd1\x91\x8c\xc1\xab\x1fq\xc3\x9dI\xff(n\xf3;J#\x05\xada\xbet\xc0\xc4\x9aO\b\x85m\x88\xf1\x84\xf4\x943\xd4\xfbo\xc4\xb25\xd5JK\xf2') getdents64(r0, &(0x7f0000000280)=""/95, 0x25) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) setns(0xffffffffffffffff, 0x54000000) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x35}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd6b1816f1083314, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000005c0)={0x8, 0xfd1a6e31, 0x20, 0x7ff, 0x8b993bb88aeee9b0, @stepwise={{0xe, 0xfff}, {0x0, 0x5}, {0x7ff, 0x1}}}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x3f) [ 711.372270] FAT-fs (loop3): invalid media value (0x00) [ 711.403236] FAT-fs (loop3): Can't find a valid FAT filesystem [ 711.437970] audit: type=1804 audit(1577007214.759:169): pid=22835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir945816448/syzkaller.TUKGmR/337/file0" dev="sda1" ino=17505 res=1 [ 711.439844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22835 comm=syz-executor.4 09:33:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r4) r5 = fanotify_init(0x0, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) fcntl$setstatus(r5, 0x4, 0x2000) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 09:33:34 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:34 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 711.713207] FAT-fs (loop3): invalid media value (0x00) [ 711.741764] FAT-fs (loop3): Can't find a valid FAT filesystem 09:33:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:35 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001401000002000000000000000000", @ANYPTR, @ANYBLOB="05030800", @ANYPTR, @ANYBLOB="0700fadb05b57a1463920095358b542900"/36], 0x4e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 09:33:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 712.034899] FAT-fs (loop3): invalid media value (0x00) [ 712.044686] FAT-fs (loop3): Can't find a valid FAT filesystem 09:33:35 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffff9}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) 09:33:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0xfffffffffffffeb6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000400)={0x5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 712.285320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22886 comm=syz-executor.4 [ 712.710148] protocol 88fb is buggy, dev hsr_slave_0 [ 712.715249] protocol 88fb is buggy, dev hsr_slave_1 [ 712.720414] protocol 88fb is buggy, dev hsr_slave_0 [ 712.725898] protocol 88fb is buggy, dev hsr_slave_1 [ 714.790127] net_ratelimit: 8 callbacks suppressed [ 714.790132] protocol 88fb is buggy, dev hsr_slave_0 [ 714.790190] protocol 88fb is buggy, dev hsr_slave_1 [ 714.790262] protocol 88fb is buggy, dev hsr_slave_0 [ 714.810211] protocol 88fb is buggy, dev hsr_slave_1 [ 714.870136] protocol 88fb is buggy, dev hsr_slave_0 [ 714.875254] protocol 88fb is buggy, dev hsr_slave_1 [ 715.190116] protocol 88fb is buggy, dev hsr_slave_0 [ 715.195249] protocol 88fb is buggy, dev hsr_slave_1 [ 715.270133] protocol 88fb is buggy, dev hsr_slave_0 [ 715.275301] protocol 88fb is buggy, dev hsr_slave_1 [ 721.030206] net_ratelimit: 26 callbacks suppressed [ 721.035253] protocol 88fb is buggy, dev hsr_slave_0 [ 721.040324] protocol 88fb is buggy, dev hsr_slave_1 [ 721.045408] protocol 88fb is buggy, dev hsr_slave_0 [ 721.050497] protocol 88fb is buggy, dev hsr_slave_1 [ 721.110169] protocol 88fb is buggy, dev hsr_slave_0 [ 721.115297] protocol 88fb is buggy, dev hsr_slave_1 [ 721.430131] protocol 88fb is buggy, dev hsr_slave_0 [ 721.435252] protocol 88fb is buggy, dev hsr_slave_1 [ 721.510131] protocol 88fb is buggy, dev hsr_slave_0 [ 721.515292] protocol 88fb is buggy, dev hsr_slave_1 [ 727.270151] net_ratelimit: 26 callbacks suppressed [ 727.270156] protocol 88fb is buggy, dev hsr_slave_0 [ 727.280220] protocol 88fb is buggy, dev hsr_slave_1 [ 727.285313] protocol 88fb is buggy, dev hsr_slave_0 [ 727.290421] protocol 88fb is buggy, dev hsr_slave_1 [ 727.350163] protocol 88fb is buggy, dev hsr_slave_0 [ 727.355342] protocol 88fb is buggy, dev hsr_slave_1 [ 727.670164] protocol 88fb is buggy, dev hsr_slave_0 [ 727.675343] protocol 88fb is buggy, dev hsr_slave_1 [ 727.750144] protocol 88fb is buggy, dev hsr_slave_0 [ 727.755254] protocol 88fb is buggy, dev hsr_slave_1 [ 733.510145] net_ratelimit: 26 callbacks suppressed [ 733.515120] protocol 88fb is buggy, dev hsr_slave_0 [ 733.520190] protocol 88fb is buggy, dev hsr_slave_1 [ 733.525274] protocol 88fb is buggy, dev hsr_slave_0 [ 733.530373] protocol 88fb is buggy, dev hsr_slave_1 [ 733.590200] protocol 88fb is buggy, dev hsr_slave_0 [ 733.595324] protocol 88fb is buggy, dev hsr_slave_1 [ 733.910190] protocol 88fb is buggy, dev hsr_slave_0 [ 733.915298] protocol 88fb is buggy, dev hsr_slave_1 [ 733.990151] protocol 88fb is buggy, dev hsr_slave_0 [ 733.995307] protocol 88fb is buggy, dev hsr_slave_1 [ 739.750138] net_ratelimit: 26 callbacks suppressed [ 739.750142] protocol 88fb is buggy, dev hsr_slave_0 [ 739.760175] protocol 88fb is buggy, dev hsr_slave_1 [ 739.765255] protocol 88fb is buggy, dev hsr_slave_0 [ 739.770378] protocol 88fb is buggy, dev hsr_slave_1 [ 739.830171] protocol 88fb is buggy, dev hsr_slave_0 [ 739.835293] protocol 88fb is buggy, dev hsr_slave_1 [ 740.150233] protocol 88fb is buggy, dev hsr_slave_0 [ 740.155357] protocol 88fb is buggy, dev hsr_slave_1 [ 740.230153] protocol 88fb is buggy, dev hsr_slave_0 [ 740.235240] protocol 88fb is buggy, dev hsr_slave_1 [ 745.990166] net_ratelimit: 26 callbacks suppressed [ 745.995274] protocol 88fb is buggy, dev hsr_slave_0 [ 746.000363] protocol 88fb is buggy, dev hsr_slave_1 [ 746.005477] protocol 88fb is buggy, dev hsr_slave_0 [ 746.010586] protocol 88fb is buggy, dev hsr_slave_1 [ 746.070167] protocol 88fb is buggy, dev hsr_slave_0 [ 746.075300] protocol 88fb is buggy, dev hsr_slave_1 [ 746.390124] protocol 88fb is buggy, dev hsr_slave_0 [ 746.395217] protocol 88fb is buggy, dev hsr_slave_1 [ 746.470154] protocol 88fb is buggy, dev hsr_slave_0 [ 746.475266] protocol 88fb is buggy, dev hsr_slave_1 [ 752.230110] net_ratelimit: 26 callbacks suppressed [ 752.230114] protocol 88fb is buggy, dev hsr_slave_0 [ 752.240170] protocol 88fb is buggy, dev hsr_slave_1 [ 752.245241] protocol 88fb is buggy, dev hsr_slave_0 [ 752.250301] protocol 88fb is buggy, dev hsr_slave_1 [ 752.310149] protocol 88fb is buggy, dev hsr_slave_0 [ 752.315270] protocol 88fb is buggy, dev hsr_slave_1 [ 752.630110] protocol 88fb is buggy, dev hsr_slave_0 [ 752.635228] protocol 88fb is buggy, dev hsr_slave_1 [ 752.710137] protocol 88fb is buggy, dev hsr_slave_0 [ 752.715244] protocol 88fb is buggy, dev hsr_slave_1 [ 758.470139] net_ratelimit: 26 callbacks suppressed [ 758.475121] protocol 88fb is buggy, dev hsr_slave_0 [ 758.480204] protocol 88fb is buggy, dev hsr_slave_1 [ 758.485382] protocol 88fb is buggy, dev hsr_slave_0 [ 758.490458] protocol 88fb is buggy, dev hsr_slave_1 [ 758.550167] protocol 88fb is buggy, dev hsr_slave_0 [ 758.555276] protocol 88fb is buggy, dev hsr_slave_1 [ 758.870143] protocol 88fb is buggy, dev hsr_slave_0 [ 758.875234] protocol 88fb is buggy, dev hsr_slave_1 [ 758.950147] protocol 88fb is buggy, dev hsr_slave_0 [ 758.955340] protocol 88fb is buggy, dev hsr_slave_1 [ 764.710159] net_ratelimit: 26 callbacks suppressed [ 764.715147] protocol 88fb is buggy, dev hsr_slave_0 [ 764.720254] protocol 88fb is buggy, dev hsr_slave_1 [ 764.725348] protocol 88fb is buggy, dev hsr_slave_0 [ 764.730420] protocol 88fb is buggy, dev hsr_slave_1 [ 764.790141] protocol 88fb is buggy, dev hsr_slave_0 [ 764.795273] protocol 88fb is buggy, dev hsr_slave_1 [ 765.110145] protocol 88fb is buggy, dev hsr_slave_0 [ 765.115289] protocol 88fb is buggy, dev hsr_slave_1 [ 765.190145] protocol 88fb is buggy, dev hsr_slave_0 [ 765.195292] protocol 88fb is buggy, dev hsr_slave_1 [ 770.950145] net_ratelimit: 26 callbacks suppressed [ 770.950149] protocol 88fb is buggy, dev hsr_slave_0 [ 770.960181] protocol 88fb is buggy, dev hsr_slave_1 [ 770.965231] protocol 88fb is buggy, dev hsr_slave_0 [ 770.970326] protocol 88fb is buggy, dev hsr_slave_1 [ 771.030789] protocol 88fb is buggy, dev hsr_slave_0 [ 771.035950] protocol 88fb is buggy, dev hsr_slave_1 [ 771.350162] protocol 88fb is buggy, dev hsr_slave_0 [ 771.355307] protocol 88fb is buggy, dev hsr_slave_1 [ 771.440135] protocol 88fb is buggy, dev hsr_slave_0 [ 771.445242] protocol 88fb is buggy, dev hsr_slave_1 [ 777.190146] net_ratelimit: 26 callbacks suppressed [ 777.195129] protocol 88fb is buggy, dev hsr_slave_0 [ 777.200220] protocol 88fb is buggy, dev hsr_slave_1 [ 777.205313] protocol 88fb is buggy, dev hsr_slave_0 [ 777.210430] protocol 88fb is buggy, dev hsr_slave_1 [ 777.270161] protocol 88fb is buggy, dev hsr_slave_0 [ 777.275311] protocol 88fb is buggy, dev hsr_slave_1 [ 777.590129] protocol 88fb is buggy, dev hsr_slave_0 [ 777.595258] protocol 88fb is buggy, dev hsr_slave_1 [ 777.670158] protocol 88fb is buggy, dev hsr_slave_0 [ 777.675316] protocol 88fb is buggy, dev hsr_slave_1 [ 783.430107] net_ratelimit: 26 callbacks suppressed [ 783.430111] protocol 88fb is buggy, dev hsr_slave_0 [ 783.440119] protocol 88fb is buggy, dev hsr_slave_1 [ 783.445174] protocol 88fb is buggy, dev hsr_slave_0 [ 783.450310] protocol 88fb is buggy, dev hsr_slave_1 [ 783.510149] protocol 88fb is buggy, dev hsr_slave_0 [ 783.515302] protocol 88fb is buggy, dev hsr_slave_1 [ 783.830417] protocol 88fb is buggy, dev hsr_slave_0 [ 783.835505] protocol 88fb is buggy, dev hsr_slave_1 [ 783.910149] protocol 88fb is buggy, dev hsr_slave_0 [ 783.915285] protocol 88fb is buggy, dev hsr_slave_1 [ 789.670133] net_ratelimit: 26 callbacks suppressed [ 789.675158] protocol 88fb is buggy, dev hsr_slave_0 [ 789.680241] protocol 88fb is buggy, dev hsr_slave_1 [ 789.685381] protocol 88fb is buggy, dev hsr_slave_0 [ 789.690450] protocol 88fb is buggy, dev hsr_slave_1 [ 789.750141] protocol 88fb is buggy, dev hsr_slave_0 [ 789.755300] protocol 88fb is buggy, dev hsr_slave_1 [ 790.070171] protocol 88fb is buggy, dev hsr_slave_0 [ 790.075267] protocol 88fb is buggy, dev hsr_slave_1 [ 790.150138] protocol 88fb is buggy, dev hsr_slave_0 [ 790.155253] protocol 88fb is buggy, dev hsr_slave_1 [ 795.910157] net_ratelimit: 26 callbacks suppressed [ 795.915184] protocol 88fb is buggy, dev hsr_slave_0 [ 795.920256] protocol 88fb is buggy, dev hsr_slave_1 [ 795.925347] protocol 88fb is buggy, dev hsr_slave_0 [ 795.930414] protocol 88fb is buggy, dev hsr_slave_1 [ 795.990308] protocol 88fb is buggy, dev hsr_slave_0 [ 795.995517] protocol 88fb is buggy, dev hsr_slave_1 [ 796.310134] protocol 88fb is buggy, dev hsr_slave_0 [ 796.315264] protocol 88fb is buggy, dev hsr_slave_1 [ 796.390145] protocol 88fb is buggy, dev hsr_slave_0 [ 796.395251] protocol 88fb is buggy, dev hsr_slave_1 [ 802.150132] net_ratelimit: 26 callbacks suppressed [ 802.150137] protocol 88fb is buggy, dev hsr_slave_0 [ 802.160286] protocol 88fb is buggy, dev hsr_slave_1 [ 802.165381] protocol 88fb is buggy, dev hsr_slave_0 [ 802.170455] protocol 88fb is buggy, dev hsr_slave_1 [ 802.230169] protocol 88fb is buggy, dev hsr_slave_0 [ 802.235289] protocol 88fb is buggy, dev hsr_slave_1 [ 802.550146] protocol 88fb is buggy, dev hsr_slave_0 [ 802.555263] protocol 88fb is buggy, dev hsr_slave_1 [ 802.630138] protocol 88fb is buggy, dev hsr_slave_0 [ 802.635255] protocol 88fb is buggy, dev hsr_slave_1 [ 808.390139] net_ratelimit: 26 callbacks suppressed [ 808.395207] protocol 88fb is buggy, dev hsr_slave_0 [ 808.400280] protocol 88fb is buggy, dev hsr_slave_1 [ 808.405379] protocol 88fb is buggy, dev hsr_slave_0 [ 808.410452] protocol 88fb is buggy, dev hsr_slave_1 [ 808.470174] protocol 88fb is buggy, dev hsr_slave_0 [ 808.475287] protocol 88fb is buggy, dev hsr_slave_1 [ 808.790152] protocol 88fb is buggy, dev hsr_slave_0 [ 808.795273] protocol 88fb is buggy, dev hsr_slave_1 [ 808.870131] protocol 88fb is buggy, dev hsr_slave_0 [ 808.875432] protocol 88fb is buggy, dev hsr_slave_1 [ 814.630130] net_ratelimit: 26 callbacks suppressed [ 814.630134] protocol 88fb is buggy, dev hsr_slave_0 [ 814.640208] protocol 88fb is buggy, dev hsr_slave_1 [ 814.645331] protocol 88fb is buggy, dev hsr_slave_0 [ 814.650442] protocol 88fb is buggy, dev hsr_slave_1 [ 814.710155] protocol 88fb is buggy, dev hsr_slave_0 [ 814.715253] protocol 88fb is buggy, dev hsr_slave_1 [ 815.030148] protocol 88fb is buggy, dev hsr_slave_0 [ 815.035317] protocol 88fb is buggy, dev hsr_slave_1 [ 815.110133] protocol 88fb is buggy, dev hsr_slave_0 [ 815.115242] protocol 88fb is buggy, dev hsr_slave_1 [ 820.870137] net_ratelimit: 26 callbacks suppressed [ 820.875129] protocol 88fb is buggy, dev hsr_slave_0 [ 820.880199] protocol 88fb is buggy, dev hsr_slave_1 [ 820.885308] protocol 88fb is buggy, dev hsr_slave_0 [ 820.890404] protocol 88fb is buggy, dev hsr_slave_1 [ 820.960143] protocol 88fb is buggy, dev hsr_slave_0 [ 820.965226] protocol 88fb is buggy, dev hsr_slave_1 [ 821.270143] protocol 88fb is buggy, dev hsr_slave_0 [ 821.275243] protocol 88fb is buggy, dev hsr_slave_1 [ 821.350138] protocol 88fb is buggy, dev hsr_slave_0 [ 821.355257] protocol 88fb is buggy, dev hsr_slave_1 [ 827.110149] net_ratelimit: 26 callbacks suppressed [ 827.115169] protocol 88fb is buggy, dev hsr_slave_0 [ 827.120286] protocol 88fb is buggy, dev hsr_slave_1 [ 827.125389] protocol 88fb is buggy, dev hsr_slave_0 [ 827.130453] protocol 88fb is buggy, dev hsr_slave_1 [ 827.190148] protocol 88fb is buggy, dev hsr_slave_0 [ 827.195260] protocol 88fb is buggy, dev hsr_slave_1 [ 827.510103] protocol 88fb is buggy, dev hsr_slave_0 [ 827.515205] protocol 88fb is buggy, dev hsr_slave_1 [ 827.590134] protocol 88fb is buggy, dev hsr_slave_0 [ 827.595382] protocol 88fb is buggy, dev hsr_slave_1 [ 833.350143] net_ratelimit: 26 callbacks suppressed [ 833.355138] protocol 88fb is buggy, dev hsr_slave_0 [ 833.360205] protocol 88fb is buggy, dev hsr_slave_1 [ 833.365287] protocol 88fb is buggy, dev hsr_slave_0 [ 833.370370] protocol 88fb is buggy, dev hsr_slave_1 [ 833.430136] protocol 88fb is buggy, dev hsr_slave_0 [ 833.435223] protocol 88fb is buggy, dev hsr_slave_1 [ 833.750152] protocol 88fb is buggy, dev hsr_slave_0 [ 833.755242] protocol 88fb is buggy, dev hsr_slave_1 [ 833.830167] protocol 88fb is buggy, dev hsr_slave_0 [ 833.835292] protocol 88fb is buggy, dev hsr_slave_1 [ 839.590140] net_ratelimit: 26 callbacks suppressed [ 839.590144] protocol 88fb is buggy, dev hsr_slave_0 [ 839.600219] protocol 88fb is buggy, dev hsr_slave_1 [ 839.605350] protocol 88fb is buggy, dev hsr_slave_0 [ 839.610466] protocol 88fb is buggy, dev hsr_slave_1 [ 839.670185] protocol 88fb is buggy, dev hsr_slave_0 [ 839.675317] protocol 88fb is buggy, dev hsr_slave_1 [ 839.990180] protocol 88fb is buggy, dev hsr_slave_0 [ 839.995337] protocol 88fb is buggy, dev hsr_slave_1 [ 840.070179] protocol 88fb is buggy, dev hsr_slave_0 [ 840.075313] protocol 88fb is buggy, dev hsr_slave_1 [ 845.830135] net_ratelimit: 26 callbacks suppressed [ 845.835126] protocol 88fb is buggy, dev hsr_slave_0 [ 845.840205] protocol 88fb is buggy, dev hsr_slave_1 [ 845.845300] protocol 88fb is buggy, dev hsr_slave_0 [ 845.850365] protocol 88fb is buggy, dev hsr_slave_1 [ 845.910184] protocol 88fb is buggy, dev hsr_slave_0 [ 845.915309] protocol 88fb is buggy, dev hsr_slave_1 [ 846.230174] protocol 88fb is buggy, dev hsr_slave_0 [ 846.235306] protocol 88fb is buggy, dev hsr_slave_1 [ 846.310155] protocol 88fb is buggy, dev hsr_slave_0 [ 846.315274] protocol 88fb is buggy, dev hsr_slave_1 [ 852.070195] net_ratelimit: 26 callbacks suppressed [ 852.075233] protocol 88fb is buggy, dev hsr_slave_0 [ 852.080334] protocol 88fb is buggy, dev hsr_slave_1 [ 852.085496] protocol 88fb is buggy, dev hsr_slave_0 [ 852.090541] protocol 88fb is buggy, dev hsr_slave_1 [ 852.150136] protocol 88fb is buggy, dev hsr_slave_0 [ 852.155251] protocol 88fb is buggy, dev hsr_slave_1 [ 852.470161] protocol 88fb is buggy, dev hsr_slave_0 [ 852.475287] protocol 88fb is buggy, dev hsr_slave_1 [ 852.550135] protocol 88fb is buggy, dev hsr_slave_0 [ 852.555265] protocol 88fb is buggy, dev hsr_slave_1 [ 858.070681] INFO: task syz-executor.1:22840 blocked for more than 140 seconds. [ 858.078100] Not tainted 4.14.160-syzkaller #0 [ 858.085229] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.093226] syz-executor.1 D28848 22840 18722 0x00000004 [ 858.098927] Call Trace: [ 858.103582] __schedule+0x7b8/0x1cd0 [ 858.107299] ? firmware_map_remove+0x196/0x196 [ 858.111907] ? perf_trace_lock+0x109/0x500 [ 858.116236] schedule+0x92/0x1c0 [ 858.119582] schedule_timeout+0x93b/0xe10 [ 858.125746] ? wait_for_completion+0x274/0x420 [ 858.130350] ? find_held_lock+0x35/0x130 [ 858.134402] ? usleep_range+0x130/0x130 [ 858.138365] ? wait_for_completion+0x274/0x420 [ 858.144941] ? _raw_spin_unlock_irq+0x28/0x90 [ 858.149433] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.154545] wait_for_completion+0x27c/0x420 [ 858.158950] ? wait_for_completion_interruptible+0x490/0x490 [ 858.164861] ? wake_up_q+0xf0/0xf0 [ 858.168477] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.173557] flush_work+0x3eb/0x730 [ 858.177183] ? insert_work+0x320/0x320 [ 858.181097] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 858.186230] ? __cancel_work_timer+0x166/0x480 [ 858.190877] __cancel_work_timer+0x2f0/0x480 [ 858.195304] ? cancel_delayed_work+0x20/0x20 [ 858.199698] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 858.205038] ? trace_hardirqs_on_caller+0x400/0x590 [ 858.210093] cancel_work_sync+0x18/0x20 [ 858.214121] p9_fd_close+0x2a1/0x450 [ 858.217818] p9_client_create+0x787/0x1120 [ 858.222081] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 858.227622] ? __kmalloc_track_caller+0x372/0x790 [ 858.232533] ? __lockdep_init_map+0x10c/0x570 [ 858.237040] ? lockdep_init_map+0x9/0x10 [ 858.241146] ? __raw_spin_lock_init+0x2d/0x100 [ 858.245767] v9fs_session_init+0x1dc/0x1620 [ 858.250126] ? check_preemption_disabled+0x3c/0x250 [ 858.255148] ? v9fs_show_options+0x730/0x730 [ 858.259538] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 858.265020] ? v9fs_mount+0x5e/0x870 [ 858.268725] ? rcu_read_lock_sched_held+0x110/0x130 [ 858.273769] ? kmem_cache_alloc_trace+0x623/0x790 [ 858.280115] ? free_pages+0x46/0x50 [ 858.283748] v9fs_mount+0x7d/0x870 [ 858.287269] mount_fs+0x97/0x2a1 [ 858.290666] vfs_kern_mount.part.0+0x5e/0x3d0 [ 858.295179] do_mount+0x417/0x27d0 [ 858.298699] ? retint_kernel+0x2d/0x2d [ 858.302609] ? copy_mount_string+0x40/0x40 [ 858.306846] ? copy_mount_options+0x19e/0x2f0 [ 858.311358] ? copy_mount_options+0x1fe/0x2f0 [ 858.315858] SyS_mount+0xab/0x120 [ 858.319301] ? copy_mnt_ns+0x8c0/0x8c0 [ 858.320130] net_ratelimit: 26 callbacks suppressed [ 858.320135] protocol 88fb is buggy, dev hsr_slave_0 [ 858.323222] do_syscall_64+0x1e8/0x640 [ 858.328130] protocol 88fb is buggy, dev hsr_slave_1 [ 858.333135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 858.337052] protocol 88fb is buggy, dev hsr_slave_0 [ 858.342057] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.346913] protocol 88fb is buggy, dev hsr_slave_1 [ 858.351935] RIP: 0033:0x45a919 [ 858.365304] RSP: 002b:00007f3fb4adcc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.373046] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a919 [ 858.380343] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 858.387630] RBP: 000000000075bfc8 R08: 00000000200001c0 R09: 0000000000000000 [ 858.394943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fb4add6d4 [ 858.400127] protocol 88fb is buggy, dev hsr_slave_0 [ 858.402228] R13: 00000000004c7c9b R14: 00000000004dec40 R15: 00000000ffffffff [ 858.407450] protocol 88fb is buggy, dev hsr_slave_1 [ 858.414819] [ 858.414819] Showing all locks held in the system: [ 858.426065] 2 locks held by kworker/0:1/24: [ 858.430608] #0: ("events"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 858.439054] #1: ((&m->rq)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 858.447539] 1 lock held by khungtaskd/1044: [ 858.452134] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 858.461232] 2 locks held by getty/7118: [ 858.465211] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.473951] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.483265] 2 locks held by getty/7119: [ 858.487214] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.495915] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.509748] 2 locks held by getty/7120: [ 858.513756] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.522503] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.531839] 2 locks held by getty/7121: [ 858.535812] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.544523] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.553838] 2 locks held by getty/7122: [ 858.558577] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.567276] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.576593] 2 locks held by getty/7123: [ 858.580588] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.589276] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.598597] 2 locks held by getty/7124: [ 858.602577] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.611294] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.620660] 2 locks held by syz-executor.5/17957: [ 858.625500] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 858.634220] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 858.643550] [ 858.645164] ============================================= [ 858.645164] [ 858.652354] NMI backtrace for cpu 0 [ 858.655988] CPU: 0 PID: 1044 Comm: khungtaskd Not tainted 4.14.160-syzkaller #0 [ 858.663412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.672757] Call Trace: [ 858.675336] dump_stack+0x142/0x197 [ 858.678940] nmi_cpu_backtrace.cold+0x57/0x94 [ 858.683427] ? irq_force_complete_move.cold+0x7d/0x7d [ 858.688644] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 858.693931] arch_trigger_cpumask_backtrace+0x14/0x20 [ 858.699100] watchdog+0x5e7/0xb90 [ 858.702537] kthread+0x319/0x430 [ 858.705878] ? hungtask_pm_notify+0x50/0x50 [ 858.710177] ? kthread_create_on_node+0xd0/0xd0 [ 858.714825] ret_from_fork+0x24/0x30 [ 858.718673] protocol 88fb is buggy, dev hsr_slave_0 [ 858.723753] protocol 88fb is buggy, dev hsr_slave_1 [ 858.728821] Sending NMI from CPU 0 to CPUs 1: [ 858.733763] NMI backtrace for cpu 1 [ 858.733766] CPU: 1 PID: 6996 Comm: rsyslogd Not tainted 4.14.160-syzkaller #0 [ 858.733775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.733778] task: ffff8880942d4180 task.stack: ffff8880757b0000 [ 858.733780] RIP: 0010:__lock_acquire+0xcc9/0x4620 [ 858.733783] RSP: 0018:ffff8880757b78a0 EFLAGS: 00000046 [ 858.733788] RAX: dffffc0000000000 RBX: 0000000087741918 RCX: 0000000035aa65c2 [ 858.733791] RDX: 1ffffffff12addc1 RSI: ffff8880942d4a28 RDI: ffff8880942d4a49 [ 858.733794] RBP: ffff8880757b7a48 R08: 0000000000001e79 R09: ffffffff8956ee08 [ 858.733797] R10: ffff8880942d4a28 R11: ffff8880942d4180 R12: 0000000000000000 [ 858.733800] R13: 00000000d592f4ae R14: ffff8880942d4a00 R15: 42ebf44a1a258ca0 [ 858.733803] FS: 00007f1cecaf5700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 858.733805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.733808] CR2: 000000c42de00650 CR3: 0000000094f94000 CR4: 00000000001426e0 [ 858.733811] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 858.733814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 858.733816] Call Trace: [ 858.733818] ? __lock_acquire+0x5f7/0x4620 [ 858.733820] ? trace_hardirqs_on+0x10/0x10 [ 858.733823] ? trace_hardirqs_on+0x10/0x10 [ 858.733825] ? prepare_to_wait_event+0x138/0x830 [ 858.733827] ? save_trace+0x290/0x290 [ 858.733829] ? prepare_to_wait_event+0x138/0x830 [ 858.733831] ? finish_wait+0x18c/0x260 [ 858.733833] lock_acquire+0x16f/0x430 [ 858.733836] ? set_page_refcounted+0xe0/0xe0 [ 858.733838] fs_reclaim_acquire.part.0+0x24/0x30 [ 858.733840] ? set_page_refcounted+0xe0/0xe0 [ 858.733842] fs_reclaim_acquire+0x14/0x20 [ 858.733844] kmem_cache_alloc_trace+0x2d/0x790 [ 858.733847] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 858.733849] ? finish_wait+0x18c/0x260 [ 858.733851] do_syslog+0x559/0xb60 [ 858.733853] ? avc_has_perm_noaudit+0x420/0x420 [ 858.733855] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 858.733857] ? save_trace+0x290/0x290 [ 858.733860] ? finish_wait+0x260/0x260 [ 858.733862] kmsg_read+0x74/0xa0 [ 858.733864] proc_reg_read+0xfa/0x170 [ 858.733866] ? kmsg_poll+0xb0/0xb0 [ 858.733868] __vfs_read+0x105/0x6a0 [ 858.733871] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 858.733873] ? proc_reg_write+0x170/0x170 [ 858.733876] ? vfs_copy_file_range+0xa40/0xa40 [ 858.733878] ? selinux_file_permission+0x85/0x480 [ 858.733880] ? security_file_permission+0x89/0x1f0 [ 858.733883] ? rw_verify_area+0xea/0x2b0 [ 858.733885] vfs_read+0x137/0x350 [ 858.733887] SyS_read+0xfd/0x230 [ 858.733889] ? kernel_write+0x120/0x120 [ 858.733891] ? do_syscall_64+0x53/0x640 [ 858.733893] ? kernel_write+0x120/0x120 [ 858.733895] do_syscall_64+0x1e8/0x640 [ 858.733897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 858.733900] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.733902] RIP: 0033:0x7f1cef5551fd [ 858.733904] RSP: 002b:00007f1cecaf4e30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 858.733909] RAX: ffffffffffffffda RBX: 0000000001578650 RCX: 00007f1cef5551fd [ 858.733912] RDX: 0000000000000fff RSI: 00007f1cee3295a0 RDI: 0000000000000004 [ 858.733916] RBP: 0000000000000000 R08: 0000000001563260 R09: 0000000000000000 [ 858.733918] R10: 2073692062663838 R11: 0000000000000293 R12: 000000000065e420 [ 858.733921] R13: 00007f1cecaf59c0 R14: 00007f1cefb9a040 R15: 0000000000000003 [ 858.733923] Code: b5 80 46 86 c8 61 48 b8 00 00 00 00 00 fc ff df 4d 0f af c7 49 c1 e8 31 4e 8d 0c c5 40 fa 55 89 4c 89 ca 48 c1 ea 03 80 3c 02 00 <0f> 85 20 2f 00 00 4a 8b 1c c5 40 fa 55 89 48 85 db 74 5d 48 83 [ 858.734461] Kernel panic - not syncing: hung_task: blocked tasks [ 859.080217] CPU: 0 PID: 1044 Comm: khungtaskd Not tainted 4.14.160-syzkaller #0 [ 859.087653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.096996] Call Trace: [ 859.099575] dump_stack+0x142/0x197 [ 859.103196] panic+0x1f9/0x42d [ 859.106430] ? add_taint.cold+0x16/0x16 [ 859.110766] ? ___preempt_schedule+0x16/0x18 [ 859.115159] watchdog+0x5f8/0xb90 [ 859.118597] kthread+0x319/0x430 [ 859.121957] ? hungtask_pm_notify+0x50/0x50 [ 859.126268] ? kthread_create_on_node+0xd0/0xd0 [ 859.130925] ret_from_fork+0x24/0x30 [ 859.136282] Kernel Offset: disabled [ 859.140000] Rebooting in 86400 seconds..