[   35.692467][   T26] audit: type=1800 audit(1550573088.604:27): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   35.722457][   T26] audit: type=1800 audit(1550573088.604:28): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   36.409523][   T26] audit: type=1800 audit(1550573089.404:29): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   36.430293][   T26] audit: type=1800 audit(1550573089.404:30): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts.
2019/02/19 10:44:59 fuzzer started
2019/02/19 10:45:01 dialing manager at 10.128.0.26:36657
2019/02/19 10:45:02 syscalls: 1
2019/02/19 10:45:02 code coverage: enabled
2019/02/19 10:45:02 comparison tracing: enabled
2019/02/19 10:45:02 extra coverage: extra coverage is not supported by the kernel
2019/02/19 10:45:02 setuid sandbox: enabled
2019/02/19 10:45:02 namespace sandbox: enabled
2019/02/19 10:45:02 Android sandbox: /sys/fs/selinux/policy does not exist
2019/02/19 10:45:02 fault injection: enabled
2019/02/19 10:45:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/02/19 10:45:02 net packet injection: enabled
2019/02/19 10:45:02 net device setup: enabled
10:47:23 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400040, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/146)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/61)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'bridge_slave_0\x00', {0x2, 0x4e20, @empty}})
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000180)='syz0\x00')
r1 = dup3(r0, r0, 0x80000)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/22)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
waitid(0x3, r2, &(0x7f0000000280), 0xb, &(0x7f0000000300))
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000003c0)=0x5e0, 0x4)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000400)=""/217, &(0x7f0000000500)=0xd9)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x40, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, 0x5)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000})
ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000005c0))
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000600)=""/9)
write(r5, &(0x7f0000000640)="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", 0x1000)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000001640)="43a0836a271295bccd7aeef849eb491f7c75c7f23d277c5d1142ca12873bae205bf0d319c2d3ef0c61d2cad0722e8780e12d8fb535cd4e38d52c4666f71a28bce15cfe705f09b2d923bebc99979526fb617602b4e5cef5ab835ad9267b94d0b14af9dbfbcef335811143951d2e74207a62440aa9c78bd15ffd00b94920a85596b95d03aac7fd640d4fa52b")
connect(r0, &(0x7f0000001700)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x1f}}, 0x80)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000001780)={'security\x00'}, &(0x7f0000001800)=0x54)
pkey_alloc(0x0, 0x3)
timerfd_gettime(r1, &(0x7f0000001840))
write$P9_RGETATTR(r5, &(0x7f0000001880)={0xa0, 0x19, 0x2, {0x0, {0x1, 0x4, 0x4}, 0x8, r3, r4, 0x4, 0x8, 0x2, 0x0, 0x4, 0x719b, 0x6, 0x5, 0x20b, 0x152, 0x3f, 0x6, 0x9, 0x1, 0x5}}, 0xa0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001940)={'team0\x00', 0x2000})
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001980), 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0xfffffffffffffffd, 0x0)
rt_sigaction(0x25, &(0x7f0000001a80)={&(0x7f0000001a00)="c4a38149cffac46178773e360fee8800000000d24a04f2460fd07a00c40269ad0bc481f829a3faffffff26f39065640fb35efdc4e209a80e", {0x8}, 0x1, &(0x7f0000001a40)="c4a179c5fa0636f0f71d0000002064f2460f002bc442b5b85d00c4e31d183708c483895ea0000000002afcc462f9a6303666430f383b5b00c4c1fd10ce"}, &(0x7f0000001b40)={&(0x7f0000001ac0)="66430f555600660f136606c4a2e94504f44173a13e65f2440f43e5f365da4907cf8f697c803532ce69fc660f746dcc656467f244ad", {}, 0x0, &(0x7f0000001b00)="660f3804644b32c421e4594f5dc2294fc44191c6483a00dcb860be340866470fc77106d3560045cc650f0ff094672e20e8"}, 0x8, &(0x7f0000001b80))
getsockname$inet(r1, &(0x7f0000001bc0)={0x2, 0x0, @multicast2}, &(0x7f0000001c00)=0x10)
lsetxattr$trusted_overlay_origin(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='trusted.overlay.origin\x00', &(0x7f0000001cc0)='y\x00', 0x2, 0x3)

syzkaller login: [  190.336254][ T7600] IPVS: ftp: loaded support on port[0] = 21
10:47:23 executing program 1:
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x7fffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffd)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0xffff)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x7, 0x4)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x3, 0x32314d59, 0x1, @stepwise={0x0, 0x9, 0x5, 0x8, 0x3, 0x8}})
getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0='bpq0\x00', 0x10000, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffffffffffffffc, 0x6, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
setxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.SMACK64EXEC\x00', &(0x7f0000000300)='vmnet0+eth1wlan0eth0\x00', 0x15, 0x1)
ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000340)={0x10001, "52cb0dcea085ef4277b4938a94dd4aa4e365594a320ca7c1be1bb163ab0be83f", 0x2, 0x1})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=<r1=>0x0)
getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x2, 0x30000)
r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x7, 0x5, 0x9, 0x7, 0x0, 0x5, 0x80000, 0x9, 0xc2, 0x4, 0x5, 0x5, 0x5, 0xe8, 0xfc31, 0x1, 0x9, 0xfffffffffffffffb, 0x7a8e, 0x6, 0xf4, 0x20, 0x715, 0xfffffffffffffffb, 0xffff, 0x8ff, 0x51f, 0x8, 0x0, 0x2, 0x401, 0x6, 0x800, 0x0, 0xffffffffffffff14, 0x33, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000480), 0x6}, 0x4808, 0x1, 0x0, 0x9, 0xffff, 0x1, 0x3}, r1, 0x3, r0, 0x2)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x13, 0x1}, 'port0\x00', 0x64, 0x100000, 0x1, 0x0, 0x2, 0x7, 0x1, 0x0, 0x4, 0x8})
r3 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x60000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000006c0)={0x6, 0x9, 0x7})
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000740))
r4 = perf_event_open(&(0x7f0000000900)={0x2, 0x70, 0x8, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x7, 0xffffffff80000001, 0x0, 0x80, 0x10000, 0x7, 0x7, 0x2, 0x0, 0x2, 0x69390319, 0x8, 0x1, 0x1f, 0x7, 0x40, 0x3, 0xfffffffffffffff7, 0x401, 0x7, 0x4, 0x3, 0x7fff, 0x4e26, 0xfffffffffffffff8, 0x2, 0x958, 0x3, 0x7000000000, 0x0, 0x6, 0x0, @perf_config_ext={0x94ac, 0x1}, 0x800, 0x1, 0x4, 0x7, 0x6, 0x7, 0xb58e}, r1, 0x4, r2, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000b40)=0xe8)
mount$9p_xen(&(0x7f0000000980)='/dev/snd/controlC#\x00', &(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00)='9p\x00', 0x800, &(0x7f0000000b80)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@uname={'uname', 0x3d, 'eth1'}}, {@version_L='version=9p2000.L'}, {@fscache='fscache'}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '{\xaf^'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffb}}]}})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000c40)=0x6, &(0x7f0000000c80)=0x4)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000cc0)={0x5, 0xffffffffffff8001, 0x80000000, 0x3eb0, 0x9})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000d40)=0xc)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000d80)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000dc0))

[  190.472766][ T7600] chnl_net:caif_netlink_parms(): no params data found
[  190.572790][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.580488][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.588836][ T7600] device bridge_slave_0 entered promiscuous mode
[  190.597736][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.604793][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.612883][ T7600] device bridge_slave_1 entered promiscuous mode
[  190.634874][ T7600] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  190.638641][ T7603] IPVS: ftp: loaded support on port[0] = 21
[  190.650884][ T7600] bond0: Enslaving bond_slave_1 as an active interface with an up link
10:47:23 executing program 2:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @data})
r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7ff, 0x40)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x4})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x100)
uname(&(0x7f0000000180))
r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="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", 0x1000, 0x0)
keyctl$update(0x2, r2, &(0x7f0000001240)="a29f3f1bb3c90479913fa17bff6c768c57ecdf0737d0d5ce07b89b6129a9f9617dfebb2d372a7d069fc35f749953b038e16de040303d52cda3e586f1f54db27acda1d5a3a1d8847351e9e11f3c67c3b1911ccb25d7c182d075f5b96b4c2674b4b62382dce5b5d5eaebaba663266c75cdab721e0d7dda5f8cf1bdd3f73547cf9fe6ce71544e5c65c265391a0f567f51b4e13f6d9cdc7195d1f8bb17eb16dfb9ceae4a509689d2e413ee1f1eeffbe533ca95eec1a87a8068369a5b473e816418ab860e7b62e952a4ee0f393b5040b34a98d6", 0xd1)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001340)='/dev/cachefiles\x00', 0x500, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000001380)='trusted.overlay.opaque\x00', &(0x7f00000013c0)='y\x00', 0x2, 0x0)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000001400)={0x3, 0x3ff})
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000016c0)={0x2, 0xdc3, 0xe33, 0xdc, &(0x7f0000001440)=""/220, 0xf7, &(0x7f0000001540)=""/247, 0x41, &(0x7f0000001640)=""/65})
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000001700)={'vxcan1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001740)={<r4=>0x0, 0x1000, "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"}, &(0x7f0000002780)=0x1008)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000027c0)={r4, 0x4845}, &(0x7f0000002800)=0x8)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000002840)={0x0, 0x0, 0x2080})
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000048c0)='vxcan1\x00')
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000004900)={0x3, 0x2})
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000004940)='trusted.overlay.origin\x00', &(0x7f0000004980)='y\x00', 0x2, 0x2)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000049c0)='/dev/rtc0\x00', 0x4e00, 0x0)
getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000004a00), 0x2)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0)
mount(&(0x7f0000004a40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)='openpromfs\x00', 0x80000, 0x0)
r6 = gettid()
ptrace$getsig(0x4202, r6, 0x2, &(0x7f0000004b00))
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000004c00)={&(0x7f0000004b80)=""/106, 0x1000000, 0x1000, 0x8}, 0x18)
timer_create(0x7, &(0x7f0000004e00)={0x0, 0x26, 0x4, @thr={&(0x7f0000004c40)="51e0c968512aec9997be8c847d5db1366283ce20c2ca7deb219f4eed73c513aec652c3b53098116511550d6bec183582a105d0db36ab2e44bd910ebfdd5e96f7d684e9b527fc4de76cb36a0a7f65ce73e7e14bc8da961f2c4e2137695761393e050415486be16c89df92e28433bc5aef61e0105d5f51aadf1858e95bd494cabc93d3b7c7762e15080671962b987a9690af26ac8547144611d9bb6bea3d8d8785dfadd5694aeac1cc80253fd0de7963f239a48636783817b4c534e9", &(0x7f0000004d00)="54832d3e1e0093ab946b32d6962880408b9d83a1f661d885243267b6d288fbbcd5e323dac3ed4100c63ad59c5a5b711331e01995917fbf978c5b9d268f6f129e2acfc449e52f43848eefde781d9d8ad0c812fd5b152d63a79fe70fd383209aca224d12f21201b0b9250127cbb550720f9037caea9d2f80b6bbf9b88d7cf8da7adaa2ad94317c6942bd4851c5c62d19bed56288b345801d7862926aa53509df5283b2178845e1f33404cd359c8f8e4c311805ec53cd24dfdd4d099af28c8dd74eaefab51728fb8ba2c3af123b5b88802a4779dccab04fe9d049c9e0aff03d64e664dcbd"}}, &(0x7f0000004e40))
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000004e80)='rxrpc_s\x00', &(0x7f0000004ec0)=@secondary='builtin_and_secondary_trusted\x00')

[  190.678086][ T7600] team0: Port device team_slave_0 added
[  190.691941][ T7600] team0: Port device team_slave_1 added
[  190.778568][ T7600] device hsr_slave_0 entered promiscuous mode
10:47:23 executing program 3:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000080)=0x80, 0x80000)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000340)={@dev, <r3=>0x0}, &(0x7f0000000380)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}}}, &(0x7f00000004c0)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@remote, <r5=>0x0}, &(0x7f0000000540)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={<r6=>0x0, @loopback}, &(0x7f00000005c0)=0xc)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000f00)={@empty, <r7=>0x0}, &(0x7f0000000f40)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000010c0)={<r8=>0x0, @broadcast, @multicast1}, &(0x7f0000001100)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001200)={<r10=>0x0, @multicast2, @remote}, &(0x7f0000001240)=0xc)
accept$packet(0xffffffffffffff9c, &(0x7f0000001280)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000001400)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001440)={'team0\x00', <r13=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000001580)=0xe8)
r15 = accept4$packet(0xffffffffffffff9c, &(0x7f0000001c40)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c80)=0x14, 0x800)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003180)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000003280)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000032c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000033c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003f40)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000004040)=0xe8)
accept$packet(0xffffffffffffff9c, &(0x7f0000004200)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14)
r21 = accept4$packet(0xffffffffffffffff, &(0x7f00000042c0)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004300)=0x14, 0x80000)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004340)={<r23=>0x0, @broadcast, @multicast2}, &(0x7f0000004380)=0xc)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000043c0)={@local, @multicast2, <r24=>0x0}, &(0x7f0000004400)=0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004440)={0x748, r1, 0x500, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x74}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x264, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xe21}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r17}, {0xc8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7950}}}]}}, {{0x8, 0x1, r19}, {0x1c4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x101, 0xffffffffffffffff, 0xe66a}, {0x1, 0x80000001, 0xd0, 0xfc8}, {0x4, 0x3, 0x81, 0xa5ef}, {0x7, 0x0, 0x120000000000, 0x9}, {0x5, 0x0, 0x4, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xf5a}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}]}}]}, 0x748}}, 0x10)
connect$packet(r21, &(0x7f0000004c40)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={[], 0x15}}, 0x14)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000004c80)={0x2, [<r25=>0x0, 0x0]}, &(0x7f0000004cc0)=0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000004d00)={r25, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xa}, 0x7ff}}, 0x81, 0xea6, 0xfff, 0x7fffffff, 0x9}, 0x98)
r26 = syz_open_procfs(0x0, &(0x7f0000004dc0)='net/sockstat\x00')
write$P9_RCLUNK(r26, &(0x7f0000004e00)={0x7, 0x79, 0x2}, 0x7)
ioctl$PPPIOCGMRU(r15, 0x80047453, &(0x7f0000004e40))

[  190.866481][ T7600] device hsr_slave_1 entered promiscuous mode
[  190.931128][ T7605] IPVS: ftp: loaded support on port[0] = 21
[  190.934262][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.944202][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.952046][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.959148][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.071943][ T7609] IPVS: ftp: loaded support on port[0] = 21
[  191.133390][ T7603] chnl_net:caif_netlink_parms(): no params data found
10:47:24 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101400, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x40}, {r0}, {r0, 0xc208}, {r0, 0x5028}, {r1, 0x80}, {r0, 0x2}, {r0, 0x4200}, {r0, 0x90}, {r0, 0x4000}, {r2, 0x6000}], 0xa, &(0x7f0000000140), &(0x7f0000000180)={0x22c5}, 0x8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x5, 0x4, 0xa, 0x1})
r3 = socket$caif_seqpacket(0x25, 0x5, 0x4)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000340)=0x8)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000380)={0x304, 0x0, 0x0, 0x8001, 0x80, 0x7f, 0x1})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200000, 0x0)
r5 = semget(0x3, 0x0, 0x400)
semctl$IPC_INFO(r5, 0x3, 0x3, &(0x7f0000000400)=""/33)
close(r1)
ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)=<r6=>0x0)
r7 = getpgid(0x0)
kcmp(r6, r7, 0x7, r1, r4)
memfd_create(&(0x7f00000004c0)='em0\x00', 0x4)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000540)=@bcast)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000580))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x2, 0x2, 0x1, 0x1})
ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000700)={0x1f, <r9=>0x0, 0x2, 0x20})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000740)={0x80, r9, 0x0, 0x9})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000980)={<r10=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000a00)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r10}}, 0x18)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000a40)={0x5, 0x7, 0x5})

[  191.281820][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.295834][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.303858][ T7603] device bridge_slave_0 entered promiscuous mode
[  191.312114][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.319577][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.327915][ T7603] device bridge_slave_1 entered promiscuous mode
[  191.340884][ T7605] chnl_net:caif_netlink_parms(): no params data found
[  191.354630][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.420759][ T7600] 8021q: adding VLAN 0 to HW filter on device team0
[  191.442806][ T7603] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  191.464750][ T7603] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  191.476192][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.488380][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.509969][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
10:47:24 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0)
recvfrom$llc(r0, &(0x7f0000000040)=""/66, 0x42, 0x2000, &(0x7f00000000c0)={0x1a, 0x30f, 0x77, 0xffffffffffffff80, 0x8d, 0x1ca, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1)
ioctl$KDDISABIO(r0, 0x4b37)
ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000180)={0xa336, 0xfffffffffffffc01})
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0x9, 0xffffffffffffff81, 0x3, 0x9}, 0x8)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'ip6gre0\x00', 0x8})
fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x0)
write$selinux_attr(r0, &(0x7f00000002c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={<r1=>0x0}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e23, 0xff, @mcast1, 0x3}}, 0xed, 0x5, 0x7f, 0x5, 0x9c}, 0x98)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00')
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc000020}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000006c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000700)={r4, 0x1})
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00'}, &(0x7f00000007c0)=0x44)
chdir(&(0x7f0000000800)='./file0\x00')
lremovexattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='trusted.syz\x00')
bind$tipc(r0, &(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x4}}, 0x10)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000900)={0x0, 0x61, 0x5, 0x40, &(0x7f0000ffc000/0x4000)=nil, 0x8})
write$FUSE_POLL(r0, &(0x7f0000000940)={0x18, 0x0, 0x3, {0x1}}, 0x18)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000980)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @rand_addr=0x8de7}, @in6={0xa, 0x4e24, 0x1000, @remote, 0x1}], 0x3c)
mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x82, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client='access=client'}], [{@smackfshat={'smackfshat', 0x3d, 'ip6gre0\x00'}}, {@subj_role={'subj_role', 0x3d, 'filter\x00'}}]}})
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000ac0)=0x4, 0x4)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000b00)={0xa08, 0x4})
keyctl$set_reqkey_keyring(0xe, 0x5)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000b40)=0x7fffffff)

[  191.519926][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  191.554571][ T7612] IPVS: ftp: loaded support on port[0] = 21
[  191.554713][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.574631][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.585627][ T7605] device bridge_slave_0 entered promiscuous mode
[  191.609899][ T7609] chnl_net:caif_netlink_parms(): no params data found
[  191.623426][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.637082][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.645557][ T7605] device bridge_slave_1 entered promiscuous mode
[  191.660724][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.672203][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.680609][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.687714][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.695281][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.704587][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.713105][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.720162][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.728088][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.736759][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.769462][ T7603] team0: Port device team_slave_0 added
[  191.778208][ T7603] team0: Port device team_slave_1 added
[  191.785003][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.793644][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.834979][ T7605] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  191.840341][ T7616] IPVS: ftp: loaded support on port[0] = 21
[  191.843573][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.858092][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.866668][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.874862][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.883289][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.899598][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.906724][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.914488][ T7609] device bridge_slave_0 entered promiscuous mode
[  191.927968][ T7605] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  191.948678][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.958242][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.966235][ T7609] device bridge_slave_1 entered promiscuous mode
[  191.973505][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.982068][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.002908][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.097559][ T7603] device hsr_slave_0 entered promiscuous mode
[  192.146463][ T7603] device hsr_slave_1 entered promiscuous mode
[  192.220990][ T7605] team0: Port device team_slave_0 added
[  192.234121][ T7609] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  192.249627][ T7605] team0: Port device team_slave_1 added
[  192.256545][ T7609] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  192.327624][ T7605] device hsr_slave_0 entered promiscuous mode
[  192.376257][ T7605] device hsr_slave_1 entered promiscuous mode
[  192.421738][ T7609] team0: Port device team_slave_0 added
[  192.429916][ T7609] team0: Port device team_slave_1 added
[  192.441468][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.510774][ T7612] chnl_net:caif_netlink_parms(): no params data found
[  192.567477][ T7609] device hsr_slave_0 entered promiscuous mode
[  192.616216][ T7609] device hsr_slave_1 entered promiscuous mode
10:47:25 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  192.765380][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.772860][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.781262][ T7612] device bridge_slave_0 entered promiscuous mode
[  192.813882][ T7616] chnl_net:caif_netlink_parms(): no params data found
[  192.842256][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.850397][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.858207][ T7612] device bridge_slave_1 entered promiscuous mode
[  192.910899][ T7612] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  192.940101][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0
10:47:26 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  192.957615][ T7612] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  192.969312][    C0] hrtimer: interrupt took 35351 ns
[  192.971152][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.983600][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.999554][ T7616] device bridge_slave_0 entered promiscuous mode
[  193.028466][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.042081][ T7612] team0: Port device team_slave_0 added
[  193.066763][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.074198][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.082286][ T7616] device bridge_slave_1 entered promiscuous mode
[  193.094132][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.102645][ T7612] team0: Port device team_slave_1 added
[  193.109655][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.122935][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.132980][ T7609] 8021q: adding VLAN 0 to HW filter on device team0
[  193.150970][ T7603] 8021q: adding VLAN 0 to HW filter on device team0
[  193.180599][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.190246][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.223005][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.232742][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.245525][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.252678][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
10:47:26 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  193.267598][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.275366][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.293416][ T7605] 8021q: adding VLAN 0 to HW filter on device team0
[  193.378697][ T7612] device hsr_slave_0 entered promiscuous mode
10:47:26 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  193.436065][ T7612] device hsr_slave_1 entered promiscuous mode
[  193.507839][ T7616] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  193.520561][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.529963][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.538667][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.547069][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.554150][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.562293][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.571148][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.579695][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.586799][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.596839][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.637498][ T7616] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  193.658639][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.668456][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.677562][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
10:47:26 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  193.686264][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.694831][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.703845][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.717348][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.728905][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.739221][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.747789][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.756147][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.771356][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.779833][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.786943][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.794577][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.803230][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.811537][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.818618][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.826761][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.835403][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.844118][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.852777][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.861183][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.868296][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.876520][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.885156][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.893849][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.902468][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.911087][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.919734][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.932565][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:47:26 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  193.971987][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.980511][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.005011][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.013266][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.021909][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.030884][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.039467][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.048142][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.056502][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.064759][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.073537][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.082262][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.121772][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.142151][ T7616] team0: Port device team_slave_0 added
[  194.156397][ T7603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.185939][ T7603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.207830][ T7616] team0: Port device team_slave_1 added
[  194.214333][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.223671][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
10:47:27 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0)

[  194.235651][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.249546][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.267006][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.294192][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.321030][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.337756][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.364290][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.401554][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.428834][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.453293][ T7612] 8021q: adding VLAN 0 to HW filter on device team0
10:47:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")

[  194.521833][ T7616] device hsr_slave_0 entered promiscuous mode
[  194.576372][ T7616] device hsr_slave_1 entered promiscuous mode
[  194.652702][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.666542][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.681748][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.688884][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.697416][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.706841][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.715169][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.722248][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.729917][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.739170][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.756464][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.765008][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.789216][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.816712][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.825279][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.836151][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.845018][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.855075][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.863557][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.872511][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.890277][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.910699][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.928594][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.938092][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.953256][ T7616] 8021q: adding VLAN 0 to HW filter on device team0
[  194.969138][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.977909][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.986735][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.993777][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.001939][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.021409][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.029046][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.038093][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.047041][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.054073][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.061698][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.070633][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.087319][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.097308][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.105591][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.114655][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.123389][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.131747][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.145250][ T7616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.157513][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.166572][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.174555][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.183722][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.220215][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0
10:47:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7ce"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:28 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:47:28 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:28 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:28 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x6)

[  195.521550][ T7696] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
10:47:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

[  195.585980][ T7691] *** Guest State ***
[  195.590846][ T7691] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  195.606114][ T7691] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
10:47:28 executing program 4:

[  195.663291][ T7691] CR3 = 0x0000000000000000
10:47:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

[  195.696779][ T7691] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  195.733424][ T7691] RFLAGS=0x00000002         DR7 = 0x0000000000000400
10:47:28 executing program 4:

10:47:28 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  195.780680][ T7691] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  195.813195][ T7691] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
10:47:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x102, 0x0)
ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000))

[  195.878258][ T7691] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
10:47:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

[  195.929909][ T7691] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  195.969921][ T7691] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  196.005158][ T7691] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  196.043709][ T7691] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  196.077845][ T7691] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  196.092808][ T7691] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  196.104223][ T7691] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  196.126076][ T7691] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  196.136849][ T7691] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  196.144204][ T7691] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  196.179620][ T7691] Interruptibility = 00000000  ActivityState = 00000000
[  196.190796][ T7691] *** Host State ***
[  196.194762][ T7691] RIP = 0xffffffff811b3af0  RSP = 0xffff8880a556f8b8
[  196.204078][ T7691] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  196.211978][ T7691] FSBase=00007f5873ce5700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000
[  196.223368][ T7691] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  196.232421][ T7691] CR0=0000000080050033 CR3=00000000a7ad5000 CR4=00000000001426f0
[  196.243808][ T7691] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360
[  196.251917][ T7691] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  196.261767][ T7691] *** Control State ***
[  196.266677][ T7691] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca
[  196.274040][ T7691] EntryControls=0000d1ff ExitControls=002fefff
[  196.282777][ T7691] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  196.291076][ T7691] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000
[  196.301059][ T7691] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[  196.309539][ T7691]         reason=80000021 qualification=0000000000000000
[  196.320938][ T7691] IDTVectoring: info=00000000 errcode=00000000
[  196.327176][ T7691] TSC Offset = 0xffffff95152385c4
[  196.332198][ T7691] EPT pointer = 0x000000008bad701e
10:47:29 executing program 3:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x5890, 0x0)

10:47:29 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')

10:47:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x102, 0x0)
ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000))

10:47:29 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:29 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:29 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070")
r1 = socket$inet6(0xa, 0x1000000003, 0x3c)
connect$inet6(r1, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)

10:47:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:29 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:29 executing program 4:

10:47:29 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:29 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:29 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

10:47:29 executing program 4:

10:47:29 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:30 executing program 4:

10:47:30 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:30 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:30 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)
close(r3)

10:47:30 executing program 4:

10:47:30 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:30 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:30 executing program 4:

10:47:30 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:30 executing program 4:

10:47:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:31 executing program 4:

10:47:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:31 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
r4 = gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x2f4}], 0x100000000000013c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034b389}], 0x1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:31 executing program 4:

10:47:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000))
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:31 executing program 4:

10:47:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000))
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
syz_open_pts(r0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/89, 0x3f)

10:47:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:31 executing program 4:

10:47:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000))
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:31 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
gettid()
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000800))
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:32 executing program 4:

10:47:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, 0x0, 0x0, 0x0)

10:47:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:32 executing program 4:

10:47:32 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:32 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
gettid()
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
syz_open_pts(r0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/89, 0x3f)

10:47:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, 0x0, 0x0, 0x0)

10:47:32 executing program 4:

10:47:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:32 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:32 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2})
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:32 executing program 4:

10:47:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, 0x0, 0x0, 0x0)

10:47:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:33 executing program 4:

10:47:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}], 0x1, 0x0)

10:47:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
syz_open_pts(r0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/89, 0x3f)

10:47:33 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:33 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:33 executing program 4:

10:47:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}], 0x1, 0x0)

10:47:33 executing program 4:

10:47:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}], 0x1, 0x0)

10:47:33 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
r3 = userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:33 executing program 4:

10:47:33 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:34 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read(r2, &(0x7f0000000040)=""/89, 0x3f)

10:47:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:34 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:34 executing program 4:

10:47:34 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:34 executing program 4:

10:47:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:34 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r2, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0))
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:34 executing program 4:

10:47:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:34 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r1, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
getpid()
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read(r2, &(0x7f0000000040)=""/89, 0x3f)

10:47:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:35 executing program 4:

10:47:35 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:35 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:35 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
write$eventfd(r1, &(0x7f0000000300)=0xffffffffffffff80, 0x8)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:35 executing program 4:

10:47:35 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x0)
mmap$binder(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:35 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:35 executing program 4:

10:47:35 executing program 4:

10:47:36 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
mmap$binder(&(0x7f000077e000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:36 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:36 executing program 4:

10:47:36 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:36 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read(r2, &(0x7f0000000040)=""/89, 0x3f)

10:47:36 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:36 executing program 4:

10:47:36 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0xfffffffffffffffb, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs, 0x8, &(0x7f0000001440), 0x17a, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:36 executing program 4:

10:47:36 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:36 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
userfaultfd(0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:36 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:36 executing program 4:

10:47:36 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:36 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001000000030000000000000000bc1ed743000000010001000059ec497dec63b8dd6c5dcc8a18207a7aa5633e95e40bb0de00000000"])
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:36 executing program 4:

[  203.528709][ T8061] *** Guest State ***
[  203.553861][ T8061] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  203.621389][ T8061] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  203.638911][ T8061] CR3 = 0x0000000000000000
[  203.643457][ T8061] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  203.679214][ T8061] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  203.688687][ T8061] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  203.696555][ T8061] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
[  203.705391][ T8061] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  203.714690][ T8061] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  203.723752][ T8061] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  203.735210][ T8061] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  203.743956][ T8061] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  203.752761][ T8061] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  203.761488][ T8061] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  203.770297][ T8061] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  203.779100][ T8061] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  203.787934][ T8061] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  203.795143][ T8061] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  203.803431][ T8061] Interruptibility = 00000000  ActivityState = 00000000
[  203.810395][ T8061] *** Host State ***
[  203.814275][ T8061] RIP = 0xffffffff811b3af0  RSP = 0xffff88805811f8b8
[  203.820998][ T8061] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  203.828850][ T8061] FSBase=00007f54eecf1700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000
[  203.837465][ T8061] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  203.844048][ T8061] CR0=0000000080050033 CR3=000000009e709000 CR4=00000000001426e0
[  203.851901][ T8061] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360
[  203.859427][ T8061] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  203.866218][ T8061] *** Control State ***
[  203.870494][ T8061] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca
[  203.877896][ T8061] EntryControls=0000d1ff ExitControls=002fefff
[  203.884044][ T8061] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  203.891804][ T8061] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000
[  203.899210][ T8061] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[  203.906528][ T8061]         reason=80000021 qualification=0000000000000000
[  203.913560][ T8061] IDTVectoring: info=00000000 errcode=00000000
[  203.919746][ T8061] TSC Offset = 0xffffff90d4609fb3
[  203.924814][ T8061] EPT pointer = 0x000000009f71e01e
10:47:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:37 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:37 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:37 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:37 executing program 4:

10:47:37 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:37 executing program 4:

10:47:37 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:37 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:37 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:37 executing program 4:

10:47:37 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:37 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:37 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440)}}], 0x2, 0x0)

10:47:37 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:37 executing program 4:

10:47:37 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:38 executing program 4:

10:47:38 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:38 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440)}}], 0x2, 0x0)

10:47:38 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:47:38 executing program 4:

10:47:38 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:38 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440)}}], 0x2, 0x0)

10:47:38 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:38 executing program 4:

10:47:38 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:47:38 executing program 4:

10:47:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x1, 0x0)

10:47:38 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:38 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:47:38 executing program 4:

10:47:38 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:39 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x1, 0x0)

10:47:39 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:39 executing program 4:

10:47:39 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:47:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:39 executing program 4:

10:47:39 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:47:39 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:39 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x1, 0x0)

10:47:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:39 executing program 4:

10:47:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:40 executing program 0:
getpid()
syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00')
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:40 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:47:40 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:40 executing program 4:

10:47:40 executing program 4:

10:47:40 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:40 executing program 0:
getpid()
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:40 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x80002, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000780)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad08b89d1fd309169f44a72107130ee548660510420aaa96759ecbc36eb9bb121d294793608dd0e731bf1d4f4daac39877e4ac714b7ecefa8a934a"}, 0x60)
sendmmsg$nfc_llcp(r1, &(0x7f0000000740)=[{&(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4ac48aca0a391d3cc4f9beeeb068d7e668254413032f87d3e6995878d6f163056e4631b9971789c907bd0410cd7a399af58486238fee2eb1aff8520b2fde01"}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x4000000)

10:47:41 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:41 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:41 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x3, 0x201a7fd7, 0xa, 0x0, 0xff00}]}, &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0x436, &(0x7f00001a7f05)=""/251}, 0x48)

10:47:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:41 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:41 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:41 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

10:47:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:42 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:42 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000003300)=[{}, {{&(0x7f0000001300)=@un=@abs={0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000040)}}], 0x2, 0x0)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:42 executing program 2:
socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f000013e000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000a55000/0x3000)=nil)

10:47:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:42 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:42 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:42 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

10:47:42 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:43 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

[  210.084531][ T8361] *** Guest State ***
[  210.103716][ T8361] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
10:47:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:43 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

[  210.150152][ T8361] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  210.217524][ T8361] CR3 = 0x0000000000000000
[  210.236029][ T8361] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  210.258350][ T8361] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  210.277992][ T8361] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  210.295554][ T8361] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
[  210.331320][ T8361] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  210.388357][ T8361] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  210.421139][ T8361] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  210.451555][ T8361] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  210.475920][ T8361] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  210.495827][ T8361] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  210.515902][ T8361] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  210.541666][ T8361] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  210.557010][ T8361] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  210.569608][ T8361] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  210.579152][ T8361] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  210.602026][ T8361] Interruptibility = 00000000  ActivityState = 00000000
[  210.618886][ T8361] *** Host State ***
[  210.624556][ T8361] RIP = 0xffffffff811b3af0  RSP = 0xffff88805468f8b8
[  210.638797][ T8361] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  210.661750][ T8361] FSBase=00007f54eecf1700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000
[  210.672949][ T8361] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[  210.681140][ T8361] CR0=0000000080050033 CR3=000000009462a000 CR4=00000000001426e0
[  210.689331][ T8361] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[  210.697225][ T8361] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  210.704106][ T8361] *** Control State ***
[  210.713041][ T8361] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca
[  210.721035][ T8361] EntryControls=0000d1ff ExitControls=002fefff
[  210.727598][ T8361] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  210.735396][ T8361] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000
[  210.744330][ T8361] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
10:47:43 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

10:47:43 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:43 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

[  210.758527][ T8361]         reason=80000021 qualification=0000000000000000
[  210.775905][ T8361] IDTVectoring: info=00000000 errcode=00000000
[  210.809814][ T8361] TSC Offset = 0xffffff8d55097a9d
10:47:43 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

[  210.849240][ T8361] EPT pointer = 0x00000000877ce01e
10:47:44 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x360)

10:47:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:44 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:44 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/237, 0xed}], 0x6, 0x0)

10:47:44 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

10:47:44 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, 0x0, 0x0, 0x0)

10:47:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:44 executing program 2:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @rand_addr="55405452bf87ed73cd07ed4f9176badb", @ipv4={[], [], @initdev}, 0x8000000000, 0x0, 0x0, 0x100})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x21, r0, 0x0, 0x0)

10:47:44 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:44 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read(r3, &(0x7f0000000040)=""/89, 0x3f)

10:47:44 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, 0x0, 0x0, 0x0)

10:47:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:44 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

10:47:44 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:47:44 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)

10:47:44 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, 0x0, 0x0, 0x0)

10:47:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ab5537ec94248c32e67da90100000000", 0x10)

10:47:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:45 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/129, 0x81}], 0x5, 0x0)

10:47:45 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:45 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/19, 0x13}], 0x4, 0x0)

10:47:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffb4})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xae9d7d6f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x403})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read(r2, &(0x7f0000000040)=""/89, 0x3f)

10:47:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:45 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/64, 0x40}], 0x3, 0x0)

10:47:45 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x3, 0x201a7fd7, 0xa, 0x0, 0xff00}]}, &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0x436, &(0x7f00001a7f05)=""/251}, 0x48)

10:47:45 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ce43e4aa", 0x4)
write$cgroup_int(r4, &(0x7f00000002c0), 0xc2a59485)
sendfile(r3, r4, 0x0, 0x1d8fc58)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)

10:47:45 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:47:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:\nyz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}]}]}, 0x54}}, 0x0)

10:47:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:45 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/76, 0x4c}], 0x2, 0x0)

10:47:45 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10004)
preadv(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1, 0x0)

[  212.720085][ T8502] Started in network mode
10:47:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278)

10:47:45 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="14bd911e06d7"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  212.753160][ T8502] Own node identity ac1414aa, cluster identity 4711
[  212.777046][ T8502] New replicast peer: 172.20.20.187
[  212.783690][ T8502] Enabled bearer <udp:
[  212.783690][ T8502] yz1>, priority 10
[  212.844395][ T8513] Enabling of bearer <udp:
[  212.844395][ T8513] yz1> rejected, already enabled
[  212.863274][    C1] kasan: CONFIG_KASAN_INLINE enabled
[  212.863367][ T8511] kobject: 'kvm' (000000008ab1b5db): kobject_uevent_env
[  212.868783][    C1] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  212.868800][    C1] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  212.868812][    C1] CPU: 1 PID: 8514 Comm: syz-executor.3 Not tainted 5.0.0-rc7-next-20190219 #38
[  212.868819][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  212.868835][    C1] RIP: 0010:dev_get_by_index_rcu+0x2e/0x150
[  212.868847][    C1] Code: 41 56 41 55 41 89 f5 41 54 53 48 89 fb e8 4a c0 fa fb 48 8d bb c0 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0a 01 00 00 48 8b 93 c0 01 00 00 41 0f b6 c5 48
[  212.868854][    C1] RSP: 0018:ffff8880ae907500 EFLAGS: 00010202
[  212.868864][    C1] RAX: dffffc0000000000 RBX: 00ffff8880863241 RCX: ffffffff85daf27b
[  212.868872][    C1] RDX: 001ffff11010c680 RSI: ffffffff8575a1c6 RDI: 00ffff8880863401
[  212.868880][    C1] RBP: ffff8880ae907520 R08: ffff88808bdc2440 R09: ffffed1015d25bc8
[  212.868888][    C1] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: ffff888086335801
[  212.868895][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: 00ffff8880863241
[  212.868905][    C1] FS:  00007f5873ce5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  212.868920][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  212.885684][ T8511] kobject: 'kvm' (000000008ab1b5db): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  212.890912][    C1] CR2: 0000001b2f221000 CR3: 00000000a83ee000 CR4: 00000000001426e0
[  212.890924][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  212.890930][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  212.890935][    C1] Call Trace:
[  212.890946][    C1]  <IRQ>
[  212.917512][ T8510] kobject: 'kvm' (000000008ab1b5db): kobject_uevent_env
[  212.936392][    C1]  ip_send_unicast_reply+0xcc4/0x11b0
[  212.936405][    C1]  ? depot_save_stack+0x1de/0x460
[  212.936418][    C1]  ? ip_make_skb+0x2c0/0x2c0
[  212.936429][    C1]  ? mark_held_locks+0xf0/0xf0
[  212.936442][    C1]  ? kasan_check_write+0x14/0x20
[  212.936462][    C1]  ? trace_hardirqs_off+0x62/0x220
[  212.942754][ T8510] kobject: 'kvm' (000000008ab1b5db): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  212.950585][    C1]  ? kasan_check_read+0x11/0x20
[  212.950601][    C1]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  212.950612][    C1]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  212.950622][    C1]  ? map_id_range_down+0x1ee/0x370
[  212.950637][    C1]  ? __put_user_ns+0x70/0x70
[  213.110952][    C1]  ? lock_acquire+0x16f/0x3f0
[  213.115607][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  213.121830][    C1]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  213.127802][    C1]  tcp_v4_send_reset+0x1051/0x2140
[  213.132886][    C1]  ? tcp_v4_send_reset+0x1051/0x2140
[  213.138148][    C1]  ? tcp_add_backlog+0x1b60/0x1b60
[  213.143240][    C1]  ? inet_lhash2_lookup+0x38e/0x4a0
[  213.148418][    C1]  ? __inet_lookup_listener+0x236/0x2d0
[  213.153942][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  213.160160][    C1]  ? __inet_lookup_listener+0x15d/0x2d0
[  213.165702][    C1]  ? memcpy+0x46/0x50
[  213.169668][    C1]  tcp_v4_rcv+0x209e/0x3730
[  213.174146][    C1]  ? tcp_v4_rcv+0x209e/0x3730
[  213.178808][    C1]  ? tcp_v4_early_demux+0x8f0/0x8f0
[  213.183987][    C1]  ip_protocol_deliver_rcu+0x60/0x8e0
[  213.189345][    C1]  ? kasan_check_read+0x11/0x20
[  213.194174][    C1]  ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0
[  213.200065][    C1]  ip_local_deliver_finish+0x23b/0x390
[  213.205638][    C1]  ip_local_deliver+0x1e9/0x520
[  213.210487][    C1]  ? ip_local_deliver_finish+0x390/0x390
[  213.216094][    C1]  ? ip_rcv+0x275/0x3f0
[  213.220226][    C1]  ? ip_protocol_deliver_rcu+0x8e0/0x8e0
[  213.225836][    C1]  ? ip_rcv_finish_core.isra.0+0x82c/0x1b80
[  213.231714][    C1]  ip_rcv_finish+0x1db/0x2f0
[  213.236281][    C1]  ip_rcv+0xe8/0x3f0
[  213.240154][    C1]  ? ip_local_deliver+0x520/0x520
[  213.245158][    C1]  ? ip_rcv_finish_core.isra.0+0x1b80/0x1b80
[  213.251116][    C1]  ? process_backlog+0x44e/0x750
[  213.256037][    C1]  ? find_held_lock+0x35/0x130
[  213.260778][    C1]  ? ip_local_deliver+0x520/0x520
[  213.265781][    C1]  __netif_receive_skb_one_core+0x115/0x1a0
[  213.271649][    C1]  ? __netif_receive_skb_core+0x3010/0x3010
[  213.277535][    C1]  ? lock_acquire+0x16f/0x3f0
[  213.282189][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  213.288407][    C1]  __netif_receive_skb+0x2c/0x1c0
[  213.293406][    C1]  process_backlog+0x206/0x750
[  213.298147][    C1]  ? net_rx_action+0x27b/0x1070
[  213.302976][    C1]  ? lockdep_hardirqs_on+0x19e/0x5d0
[  213.308252][    C1]  net_rx_action+0x4fa/0x1070
[  213.312910][    C1]  ? napi_complete_done+0x4b0/0x4b0
[  213.318091][    C1]  __do_softirq+0x266/0x95a
[  213.322577][    C1]  ? ip_finish_output2+0x969/0x1740
[  213.327776][    C1]  do_softirq_own_stack+0x2a/0x40
[  213.332781][    C1]  </IRQ>
[  213.335706][    C1]  do_softirq.part.0+0x11a/0x170
[  213.340627][    C1]  __local_bh_enable_ip+0x211/0x270
[  213.345805][    C1]  ip_finish_output2+0x99c/0x1740
[  213.350807][    C1]  ? nf_ct_expect_unregister_notifier+0x140/0x140
[  213.357197][    C1]  ? ip_output+0x44b/0x670
[  213.361592][    C1]  ? ip_copy_metadata+0xcb0/0xcb0
[  213.366605][    C1]  ip_finish_output+0x73c/0xd50
[  213.371438][    C1]  ? ip_finish_output+0x73c/0xd50
[  213.376440][    C1]  ip_output+0x21f/0x670
[  213.380660][    C1]  ? ip_mc_output+0xf70/0xf70
[  213.385314][    C1]  ? ip_fragment.constprop.0+0x240/0x240
[  213.390927][    C1]  ip_local_out+0xc4/0x1b0
[  213.395325][    C1]  __ip_queue_xmit+0x86f/0x1bf0
[  213.400160][    C1]  ? kasan_check_write+0x14/0x20
[  213.405082][    C1]  ip_queue_xmit+0x5a/0x70
[  213.409479][    C1]  __tcp_transmit_skb+0x1a32/0x3730
[  213.414662][    C1]  ? __tcp_select_window+0x8b0/0x8b0
[  213.419942][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  213.426159][    C1]  ? tcp_fastopen_no_cookie+0xe0/0x190
[  213.431595][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  213.437839][    C1]  tcp_connect+0x1e67/0x4330
[  213.442413][    C1]  ? tcp_push_one+0x110/0x110
[  213.447072][    C1]  ? dst_release+0x62/0xb0
[  213.451567][    C1]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  213.457782][    C1]  ? sk_setup_caps+0x20a/0x6a0
[  213.462528][    C1]  tcp_v4_connect+0x1514/0x1c40
[  213.467371][    C1]  ? tcp_v4_parse_md5_keys+0x270/0x270
[  213.472920][    C1]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  213.478549][    C1]  __inet_stream_connect+0x83f/0xea0
[  213.483812][    C1]  ? inet_dgram_connect+0x2e0/0x2e0
[  213.488986][    C1]  ? tcp_sendmsg_locked+0x2198/0x34b0
[  213.494349][    C1]  ? rcu_read_lock_sched_held+0x110/0x130
[  213.500046][    C1]  ? kmem_cache_alloc_trace+0x354/0x760
[  213.505568][    C1]  ? mark_held_locks+0xf0/0xf0
[  213.510410][    C1]  tcp_sendmsg_locked+0x2347/0x34b0
[  213.515673][    C1]  ? lock_sock_nested+0xac/0x120
[  213.520698][    C1]  ? find_held_lock+0x35/0x130
[  213.525440][    C1]  ? mark_held_locks+0xa4/0xf0
[  213.530179][    C1]  ? tcp_sendpage+0x60/0x60
[  213.534660][    C1]  ? lock_sock_nested+0x9a/0x120
[  213.539572][    C1]  ? trace_hardirqs_on+0x67/0x230
[  213.544584][    C1]  ? lock_sock_nested+0x9a/0x120
[  213.549510][    C1]  ? __local_bh_enable_ip+0x15a/0x270
[  213.554946][    C1]  tcp_sendmsg+0x30/0x50
[  213.559166][    C1]  inet_sendmsg+0x147/0x5d0
[  213.563646][    C1]  ? ipip_gro_receive+0x100/0x100
[  213.568646][    C1]  sock_sendmsg+0xdd/0x130
[  213.573038][    C1]  __sys_sendto+0x262/0x380
[  213.577527][    C1]  ? __ia32_sys_getpeername+0xb0/0xb0
[  213.582893][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  213.589114][    C1]  ? nsecs_to_jiffies+0x30/0x30
[  213.593949][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  213.599517][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  213.604952][    C1]  ? do_syscall_64+0x26/0x610
[  213.609728][    C1]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  213.615788][    C1]  __x64_sys_sendto+0xe1/0x1a0
[  213.620527][    C1]  do_syscall_64+0x103/0x610
[  213.625100][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  213.630971][    C1] RIP: 0033:0x457e29
[  213.634848][    C1] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  213.654518][    C1] RSP: 002b:00007f5873ce4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  213.663006][    C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29
[  213.670967][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  213.678923][    C1] RBP: 000000000073bf00 R08: 0000000020e68000 R09: 0000000000000010
[  213.686884][    C1] R10: 00000000200007fd R11: 0000000000000246 R12: 00007f5873ce56d4
[  213.694833][    C1] R13: 00000000004c54e7 R14: 00000000004d9388 R15: 00000000ffffffff
[  213.702786][    C1] Modules linked in:
[  213.706716][    C1] ---[ end trace 7703f7157beed152 ]---
[  213.712176][    C1] RIP: 0010:dev_get_by_index_rcu+0x2e/0x150
[  213.718100][    C1] Code: 41 56 41 55 41 89 f5 41 54 53 48 89 fb e8 4a c0 fa fb 48 8d bb c0 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0a 01 00 00 48 8b 93 c0 01 00 00 41 0f b6 c5 48
[  213.737810][    C1] RSP: 0018:ffff8880ae907500 EFLAGS: 00010202
[  213.740436][ T3875] kobject: 'loop5' (00000000350b3fc7): kobject_uevent_env
[  213.743876][    C1] RAX: dffffc0000000000 RBX: 00ffff8880863241 RCX: ffffffff85daf27b
[  213.752940][ T3875] kobject: 'loop5' (00000000350b3fc7): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  213.758981][    C1] RDX: 001ffff11010c680 RSI: ffffffff8575a1c6 RDI: 00ffff8880863401
[  213.758991][    C1] RBP: ffff8880ae907520 R08: ffff88808bdc2440 R09: ffffed1015d25bc8
[  213.759004][    C1] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: ffff888086335801
[  213.793234][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: 00ffff8880863241
[  213.801418][    C1] FS:  00007f5873ce5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  213.810377][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.816967][    C1] CR2: 0000001b2f221000 CR3: 00000000a83ee000 CR4: 00000000001426e0
[  213.824953][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  213.832946][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  213.840947][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  213.849292][    C1] Kernel Offset: disabled
[  213.853614][    C1] Rebooting in 86400 seconds..