cuting program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') 13:03:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgget(0x0, 0x40) 13:03:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045439, 0x0) [ 792.770122][T21917] binder: 21909:21917 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:11 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x404000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x9, 0x4, 0xe5, 0x3, [{0x2, 0x7, 0x4, 0x0, 0x0, 0xa08}, {0x2, 0x0, 0x9, 0x0, 0x0, 0x80}, {0x7, 0x8, 0x2, 0x0, 0x0, 0x1000}]}) 13:03:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x500, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e20, @dev}], 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x18, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff8) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/68, 0x44}], 0x2) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'ovf\x00', 0x5, 0x1}, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x102002700) getuid() ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 13:03:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_id=r5, &(0x7f0000000900)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb91342354885cf29f790ad7de208000200010000000800040040000000080001001800000008000400080000000800010020000000a8ee3e91fba5a1691c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000100080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008ca55f147bd5a77ee000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe38efbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b08cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:11 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="1f000040010707079dfffd946fa2830020200a0029000300001d85680c1baba20400ff7ef52924c4be931383e70e55bc8461e53ac1bfd3fb088cf7946a5b1feb2405bbc83e56ab54292b8a5423ae0b5f483bfeb6f760fa3b7b8c5211b4b1c42689107a13bc7a1d12684c0cab14eddcab45074a2a6ca496382e78dd46383257ea98c0596f4993f20959d680fc529f082d4023e97a26e70749f653331a7dfd2e72f6f9a4edea610e8313ce28027824191c0bfda9ef5a84df4feed5e075160af9577ca7e1bce6af8afe1cf5b7e8367be50de04e8672daa4bd9f6682a52c8a1e9918edccc2e3a9a16949c7a7cd4be784797cd4d002ea845c3b", 0xf7}], 0x1}, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:03:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 793.521397][T21954] binder: 21944:21954 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 793.552239][T21958] __nla_parse: 3 callbacks suppressed [ 793.552247][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:03:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 793.639293][T21966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:03:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x100) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x90013, r0, 0x0) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:11 executing program 3: r0 = getpgid(0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@errors_remount='errors=remount-ro'}]}) sched_getscheduler(r0) socket$inet(0x10, 0x80f, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) ptrace$getregs(0xe, r0, 0x2, &(0x7f0000000480)=""/163) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x56, 0x100, @buffer={0x0, 0xa6, &(0x7f0000000040)=""/166}, &(0x7f0000000100)="87d9b0351b80ed94097084149b6d30ee8cfdf4e7e68132f7cf9e6207f1f738ac7a3465e259d00538aed64343b748a208c542a0f7ba8ca75f33b8eefc9a32ed08f9e064dbed1d64d83fdc93297b3be274bab744c14333", &(0x7f0000000180)=""/96, 0x4, 0x11, 0x0, &(0x7f0000000200)}) get_robust_list(r0, &(0x7f0000000400)=&(0x7f00000003c0)={&(0x7f0000000300)={&(0x7f00000002c0)}, 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000440)=0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x4800, 0x0) 13:03:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6400) [ 793.748491][T21971] binder: 21970:21971 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = dup2(r1, r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x20040000) [ 793.834801][T21979] FAT-fs (loop3): bogus number of reserved sectors [ 793.854360][T21979] FAT-fs (loop3): Can't find a valid FAT filesystem 13:03:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:11 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x7f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 13:03:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:12 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={[], 0x0}}, 0x12) r1 = socket$inet(0x10, 0x2, 0xc) accept4(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000140)=0x80, 0x800) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:12 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_KEEPCAPS(0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) write$P9_RCLUNK(r0, &(0x7f0000000380)={0x7}, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000180)="cfeaab1d6e3cf634eaecdfc24c0b981cf0b36c3d627a9c1f2507becd760c151658b89fac092551cdbb2090de5cbb87ec44f4aaa907abbf2b9f", 0x39) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) getsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 13:03:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(0x0, 0x84000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0xf, 0x3, 0x0, 0x0, 0x0, 0x9, 0x7, 0x800}) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) openat$cgroup_int(r0, 0x0, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='/exe\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc5(lV\xb6Dtb\xdb&\xbap\x13\x05T=C\xf4\xdb\xa5\\\x85}\xea\xb4\x8c/\x80/]{\xabG\xbfCe\xba\xf7]nM-V\xe5JoG-\xed\x1e\xf9@\xea\xa1n\xd1{~\x92\x85\x80\"N\x93\x80\xd4\bP\xac)\xf5\xd5\xc5J\x8a\xdc\x1b\xf7u\xe2z\xe1\xda\xde\xff\x8e\xc28Z\xa1\xda#\xb5\xc5v\x87\xbc(\xed\xcdg\'u\xd1C\xb1E\xe1\xce\xc8\x1e\x8bG\xb6-\x88\xa1sJ_[)nO\xf2n\xa00\xbd\xa4L?\xaf_;\x8a\x0f\xcfH\x14W}\xd2\x8d') gettid() execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000300)='\xf7%\x00'], 0x0) getpgid(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000180), 0x100000001) 13:03:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:12 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:12 executing program 3: r0 = socket$inet(0x10, 0x5, 0x10000) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 794.477140][T22038] binder: 22037:22038 Acquire 1 refcount change on invalid ref 0 ret -22 13:03:12 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000200)=0x78) [ 794.523828][T22044] binder: 22037:22044 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:12 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 794.762163][T22055] binder: 22054:22055 Acquire 1 refcount change on invalid ref 0 ret -22 [ 794.865973][T22058] binder: 22054:22058 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:13 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 13:03:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:13 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:13 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/snmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) pipe(&(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000016c0)=""/201, 0xc9}, {&(0x7f00000017c0)=""/187, 0xbb}], 0x4, &(0x7f0000001880)=""/24, 0x18}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, &(0x7f0000004f00)={0x77359400}) pipe(&(0x7f0000004f40)={0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x116) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000780)="5a49e5cef3aeb6ea6d9658389dd77281835148c026758c5a270e93cbc4395193f1ed1caacbe5329ee177990818a7f0213ffeaf5d7207313e27bc1be0227d688c60a9ca79c205a19d3ff8e3431705eca5ebe4423a11b2d336f3529d2ec321179ce3d8c46267b6576d0fbd70013cd997032603466414bfdc4e24f84a5b4c7e4a9560b9c1b572829a178672ca1d7f8c56b17b9c4334acc206234a9c525301ec93a7626a96d1667b4e8acbe801b85b91b1", 0xaf) accept4(0xffffffffffffff9c, &(0x7f0000004fc0)=@pppoe, &(0x7f0000005040)=0x80, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a0005d4e17d89cc8b3bf4000a000000fbb99fcf4d09c9c72dae19386b45261675138724447bfe5e69377b7fd3cdd4542a872657d1a3b270b844c6a64209be0e47ec6bf154e69ecb00000000000000c6d6b4186cf5f38eb39a0863e86a9c6e9b40857a85d385951ff2d3b3f56981e870f23f7ed34f993ab34933ad7bb49e50207478c6f4cb7708d10a8d38623d090b5ed0505653e88a14a20f90ff2dcdd32e85d8d1a84b66eaa8b6132a"], 0x1}}, 0x0) 13:03:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {0x0}, {&(0x7f00000009c0)=""/209, 0xd1}], 0x3, &(0x7f0000001bc0)=""/4096, 0x1000}}, {{&(0x7f0000002bc0)=@sco, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/99, 0x63}, {&(0x7f0000003d40)=""/57, 0x39}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {&(0x7f0000004100)=""/150, 0x96}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004280)=""/98, 0x62}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) [ 795.321260][T22077] binder: 22076:22077 Acquire 1 refcount change on invalid ref 0 ret -22 13:03:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x1) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100000035) r2 = socket$inet(0x10, 0x2, 0xc) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000040)={0x0, 0x1, [0x9, 0x10001, 0x4, 0x6, 0x7, 0x100000000, 0x5, 0x3ff377b0]}) 13:03:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 795.362910][T22077] binder: 22076:22077 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:13 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:13 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x501080, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x7, {0xfffffffffffff673, 0xf7c1, 0x5}}) r1 = semget(0x1, 0x4, 0x44) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000140)=[{0x2, 0x2}, {0x7, 0x3f, 0x400000000001800}, {0x4, 0xc6c, 0x800}, {0x3, 0x9, 0x1800}, {0x2, 0x65f2, 0x800}, {0x3, 0x1000, 0x1000}], 0x6, &(0x7f0000000180)={r2, r3+10000000}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x56) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) shmget(0x2, 0x3000, 0x240, &(0x7f0000ffa000/0x3000)=nil) r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0xde, &(0x7f0000000100), 0x10000000000002e4, 0x0, 0x391c1af1}, 0x20040040) 13:03:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000300)={{0x3, 0x0, 0x7f, 0x3, 0x5}, 0x200, 0x6, 0x5}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:14 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x1) accept4$alg(r0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x2, 0xffffffffffffff06) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000380), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4={[], [], @local}}, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x1c\x9e\x00\x02\x00', 0x811}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000740)={0x6, {{0xa, 0x4e22, 0x5, @mcast2, 0x7f}}}, 0x88) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) fremovexattr(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r2, 0xfffffffffffffffc}, 0x0) sendfile(r3, r6, 0x0, 0x800000000024) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) [ 796.452281][T22136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 796.470232][T22136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 796.492302][T22136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:03:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) 13:03:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:14 executing program 4: mknod(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c462913878fe3e0f1110c442019dccd3196f") execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 13:03:14 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 796.557033][T22136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 796.574055][T22136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:03:14 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:14 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') read$eventfd(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 13:03:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x4, 0x1, 0x8484) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:15 executing program 3: add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="c6d97681b3a2f1cb65787ecdebfbf0bf1b7c634832a5a7b369ace1bc274ac2ad8adc63fdf50b5137fc3487cf26183582a06a8b3e56078fd3d2144eb31c3187aae417047d0714f822c2a4056af4fa01318e164459e87b93f91cfacaa1c51aeb2877eb3ea3c4b886ce719a1bc97cd9ca9b329dca23c144d44399ea24eaa1129dabaee0e2a5c9561ab20bee5fd7e44ab00b75d131ae5567f0db91a8de3d2bff7b9e6c55e24f739fa390c36eae43a8574b8e511c293a0d0841bfd8ea8bcc668c390672b9be834008a20fb1f235467731983a97de94bf239351babbdb5d8f4861cceccfe6804f5a", 0xe5, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x200009ed, r0) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:15 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x800040000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x0, 0x3, 0x9, 0xffffffff7fffffff, 0x0, 0x0, 0x4, 0x1, 0x3f, 0x8, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x9, 0x1f, 0x0, 0x62, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffd, 0x3, 0x9, 0x0, 0x8, 0x4, 0x5, 0x40, 0x0, 0x5, 0x10000, 0x80000000, 0x1000, 0x8001, 0x800, 0x5, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xbcc, 0x6, 0x0, 0x1, 0x2a9ef5fc}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) 13:03:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, 0x0, 0x80000002) 13:03:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:15 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x20000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000000100)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$inet(0x10, 0x2, 0xc) r4 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, r0, 0x0, 0x2, &(0x7f0000000280)='r\x00', r5}, 0x30) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0xcb}, 0x0) 13:03:15 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 797.386763][T22202] binder: 22200:22202 Acquire 1 refcount change on invalid ref 0 ret -22 13:03:15 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000280)={0xfffffffffffffffa}, &(0x7f0000000240), 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@dev, @remote, @multicast2}, &(0x7f0000000140)=0xc) prctl$PR_CAPBSET_DROP(0x18, 0x22) mq_timedreceive(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x7fff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 797.438713][T22207] binder: 22200:22207 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:15 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 797.620943][T22216] binder: 22215:22216 Acquire 1 refcount change on invalid ref 0 ret -22 [ 797.665076][T22216] binder: 22215:22216 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 797.738787][T22221] IPVS: ftp: loaded support on port[0] = 21 [ 797.932538][T22221] IPVS: ftp: loaded support on port[0] = 21 13:03:15 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:15 executing program 3: r0 = socket$inet(0x10, 0x2, 0xa) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f191c4627d597f8b54c3f00fbaa8000000210c0f34c341993d610dc29004f34c0f38f6a30a000000440f73f5928fcd78a30000d45ec31e0ff774") 13:03:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, 0x0}) 13:03:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @remote}}, 0x2}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e21, @broadcast}}}, 0x88) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1000000000000001, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r4, &(0x7f00000001c0), 0x0) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat6\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) [ 798.143078][T22244] binder: 22242:22244 got transaction with invalid offsets ptr [ 798.161392][T22243] binder: 22238:22243 Acquire 1 refcount change on invalid ref 0 ret -22 [ 798.176916][T22244] binder: 22242:22244 transaction failed 29201/-14, size 24-8 line 3062 [ 798.186726][T22248] binder: 22238:22248 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 798.202011][T22250] binder_alloc: binder_alloc_mmap_handler: 22242 20001000-20004000 already mapped failed -16 [ 798.227844][T22244] binder: BINDER_SET_CONTEXT_MGR already set 13:03:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 798.241223][T22244] binder: 22242:22244 ioctl 40046207 0 returned -16 [ 798.248523][T22250] binder_alloc: 22242: binder_alloc_buf, no vma 13:03:16 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x2, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="4e6174c07eecb68bbbb4e119cbad7ab58c2aa0b4d6caf7dcc798caf866ca1d35580e288bc0d790d217a8badcf54458e5b85db76f9fdd6f52b69b21aa7fa73f28bd7acbe400f4edaa35f82031d050057dbe646d28b9edd651e09d4f49a513f5fa551457a2dd20e5f5ae7b90e42f044dc261801e6f230a26ba4d22fa7fad1fcdc6281dc09c6b777c69bf23d3a3e13d0b0119d5d474c72551c1fe1b23098defd60f57e39a268e40bbd7b88fdef8fa8e515c6ba00f123aef12c7ee8d4e2b5e454141521fc720e70372f359c8c4bab9b5ff3e0797d867", 0xd4}, {&(0x7f0000000200)="b113f737ca823a5ee10087a90c2d35f47cc921756ae2a64d897845deecb79497a4cdde9c960a8c44cd6c4c819a22fe1c66e604bb28b3ecb3203e04b25b52cf1bbf9fb9ef9560970ae51206340867c2fa36254e5a07a29f6d00b9796858e3039b00ca01e7d2d295c250f22b849566f08e0a70939e49a698ce56dad06edb378fba963a18c79924b6b517e7ef9ace94575e678c05300418264ed39a36f1172e322f79b767ae3037aac8af78a092e59a1cd84548ff85a6f434172ca6e5a6c94a71e8bc032181898d947f97a4a65d2480f544a93c04274cda9ca3d8c94f12d92add25e14deab3f4e5e60b87cacf4e48", 0xed}, {&(0x7f0000000300)="cdd192a9c51ae7425f86501de9ba024ff6226ce5931876267dc8ee0de18f8aa800935dac3d15c52bb54220a3310a81ad7bb9b26a1186f89abd0050e8ef69bf5f91a13e81067abc9602c99f659d8cc6fdd5818cec917497c20d8567c88ffc320381d24fe2ff27a847e7ad286eed2b0e1064347fd9559dad3c155412808763b1c61313b3b78b6146012c42ef5ec6efbf89714a36220a1d836d1db74f91ecc8ed1a764b1c3293469e6c424288a471988b33260057fe96ce355ca7e1c3c2b2efbf0546217244a3759090800c300f31c30a6f8fe06aaa054d345cd4a771c9a7bd381b1eb5235252d992", 0xe7}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x4000000) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r0, &(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x80, 0x800) r1 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x4, 0x800) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000480)={0x7, {0x7, 0x3, 0x2, 0x2, 0x9, 0x4463}}) [ 798.289943][T15860] binder: undelivered TRANSACTION_ERROR: 29201 [ 798.296633][T22250] binder: 22242:22250 transaction failed 29189/-3, size 24-8 line 3035 13:03:16 executing program 5: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00\x92\x16\xa3\x879kl\x92\x9e\x04\xd2u\xae\xc9\xf9\xc9j\x86\b2\x9d\x86\x81\xcc\"') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setns(r0, 0x0) [ 798.344298][T15860] binder: undelivered TRANSACTION_ERROR: 29189 [ 798.370319][T22258] binder: 22257:22258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:16 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x404, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x14}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 13:03:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 798.605587][T22277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:03:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:16 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x204000, 0x1) r0 = socket$inet(0x10, 0x5, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff80, 0x161040) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) 13:03:16 executing program 5: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$chown(0x4, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getuid() ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 13:03:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000300)={0x80000000, 0x4, 0x4, 0x2000000a, {r5, r6/1000+30000}, {0x0, 0xa186f90dabe43b4e, 0x1000, 0x100000001, 0x100000000, 0x81, "49f00286"}, 0x4, 0x1, @fd=r3, 0x4}) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000340012000c000100697036746e6c0000240002000800090004000000080006000000000008000400000000000800110000000000"], 0x1}}, 0x0) 13:03:17 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x44000, 0x0) [ 799.199419][T22294] binder: 22288:22294 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:17 executing program 4: r0 = getpid() capget(&(0x7f0000000100)={0x20071026, r0}, &(0x7f00000000c0)) 13:03:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 799.352929][T22314] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 13:03:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r2}) [ 799.393231][T22319] binder: 22318:22319 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:17 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3}, 0x2c8) 13:03:17 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@initdev, @empty, @dev}, &(0x7f0000000100)=0xc) r1 = syz_open_dev$mouse(&(0x7f0000001140)='/dev/input/mouse#\x00', 0x5, 0x503200) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001180), &(0x7f00000011c0)=0x4) prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/4096) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0xfffffffffffffddd}, 0x0) 13:03:17 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0xa20, 0x0, 0x0, "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"}], 0xa20}, 0x8}], 0x1, 0x0) 13:03:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 799.673779][T22343] binder: 22342:22343 ioctl c0306201 0 returned -14 [ 799.702417][T22343] binder: 22342:22343 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x6, &(0x7f00000001c0)=[{0x7, 0x0, 0x6, 0x4}, {0x1800000000000000, 0x1ff, 0x4000000000000000, 0x2}, {0x0, 0x80000001, 0x4276, 0x10000}, {0x0, 0x5, 0x1, 0x3}, {0x5, 0xb0, 0x7f, 0x2}, {0x7, 0x2, 0x8, 0xbb21}]}, 0x10) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0x40) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000010c2f7a714b020707071dfffdff0f00000000000000270001005d33bd428fbd2deddf8ecf697bf20cdcdb04c7a3254d38001d85680c1baba20400ff7edea503199dff48883981a2ca46a7d8307e5d1a17308dfe37ad8ec9", 0x5c}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc000) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4042, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/57) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x0, r2, 0x2c, r3}, 0x10) 13:03:17 executing program 5: r0 = socket(0x10, 0x2, 0x9) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, 0x0, 0x80000002) 13:03:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000980)="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", 0x0}, 0x18) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x0, {{0x1ad9d42a2117c686}}}, 0x18) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) 13:03:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 800.048058][T22360] binder: 22358:22360 ioctl c0306201 0 returned -14 [ 800.048719][T22363] Invalid option length (320) for dns_resolver key [ 800.088796][T22360] binder: 22358:22360 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000980)="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", 0x0}, 0x18) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x0, {{0x1ad9d42a2117c686}}}, 0x18) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) 13:03:18 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x1ba}], 0x1}, 0x1000000) 13:03:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 800.300671][T22377] Invalid option length (320) for dns_resolver key 13:03:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xf, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000980)="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", 0x0}, 0x18) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x0, {{0x1ad9d42a2117c686}}}, 0x18) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) [ 800.400286][T22385] binder: 22384:22385 ioctl c0306201 0 returned -14 [ 800.421334][T22385] binder: 22384:22385 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 800.564165][T22392] Invalid option length (320) for dns_resolver key 13:03:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000300)=@ax25={{0x3, @netrom}, [@remote, @rose, @rose, @remote, @default, @null, @rose, @default]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, &(0x7f0000000440)=""/165, 0xa5}, 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3f, 0x80) sendmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)="6ad2a9905b660f295a349066398d6386aaced8904bbcaf98a79e158af8e049bbd13764029a413b5c942fa610935c801a0ea137fbb1a4a404f08898200d3384cf4c6737c567fe9d8f352b8e8a33ccf6d4c7f836f01cadad4f7228bafb7d1e58c00c81afc4819f2762476fa0c16e3ad1ff0c23eb8b1ec7e2c8b87bc7de95069553e2734e33af891e563b13bcefc0bf84e94a2bd5f625f05da6df8fcbbd0629adfce7682a553aa43ba7005efd67365278284eac9da183499862756fa0df9519b4ef8e0b9cd2e1f44979f43363ca", 0xcc}, {&(0x7f0000000040)="86f39026b6e3c1683edbdd7cda73b5d7c5901f", 0x13}, {&(0x7f0000000200)="ac030570aaa561d42afc699593b9d1e3cd9c909b9dcebcde0aa8836ad162de036babbaa4d331f0781281d8ba4ecc866d2ecd3f4137f9aedc099e7e88f10d45306f0da88f8e787c4548ee62f0142e4a9ee2e69b62", 0x54}, {&(0x7f0000000280)="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", 0x1000}], 0x4}, 0x80) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000980)="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", 0x0}, 0x18) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x0, {{0x1ad9d42a2117c686}}}, 0x18) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) 13:03:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xc0, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') memfd_create(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 13:03:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xec0, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 801.085970][T22408] binder: 22406:22408 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 801.107296][T22415] Invalid option length (320) for dns_resolver key 13:03:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:19 executing program 3: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r0, 0x6}, 0x8) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl(r1, 0x8596, &(0x7f0000000200)="9257f1bd3afe49487d92d5ab3891566da63f244581e2ccb20719e3a5d17c436c6745aeefb6077b665e2f8cb9bbcc8a35013b0f2bb2a3a645f0234f8be7fb42d9d3759b1709d45b2813b9e400bda2b1e59699c313f3968badd9b0caeb6ec5f770eab5e34f217d7a64218176b988fe3f7f6d4c27fcfda6b0bf4dc6bb72e75e8348d79a9c7a7b1b2784dacabd8e1533b99cff23b682da48510306a295d9e0df7945d1c69a4bfc0e044db27ec21a83b826f6e7a57b41891927990684e3b8e989c690e843e7") 13:03:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="04007c47", 0x4) [ 801.252952][T22431] binder: 22428:22431 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x33fe0, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:19 executing program 5: syz_genetlink_get_family_id$fou(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0xfffffffffffffd2b) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 13:03:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:19 executing program 4: recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0) 13:03:19 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4801, 0x0) r2 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x8], 0x1, 0xff5, 0x3, 0x7, 0x2d36101c, 0x1, {0x4ce, 0x7, 0x1, 0x689, 0x92f, 0x81, 0x2, 0x0, 0x5, 0x9, 0x7, 0x9b, 0x8, 0x8, "25ef90642e927cc2f0bbd2d163326c965b28b4274113e1cf9075c9a0fa267cb9"}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0xa, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 13:03:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20000094, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) syz_genetlink_get_family_id$ipvs(0x0) dup3(r0, r1, 0x0) [ 801.979491][T22473] binder: 22465:22473 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x7ffff000, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:19 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x6, 0x4) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x428, &(0x7f0000000100)='wlan0em1\x00') sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000001480)) getgroups(0x0, 0x0) getuid() write$P9_RSTATu(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000001440)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) readlinkat(r0, &(0x7f0000001580)='./file0\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001780)=@generic={0x0, 0x1, 0x400}) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) fallocate(0xffffffffffffffff, 0x44, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) write$P9_RGETATTR(r1, 0x0, 0x206) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000040)=0x54) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, 0x0) 13:03:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffdef, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)) 13:03:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) nanosleep(&(0x7f00000001c0), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:20 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0xfffffffffffffed2}], 0x1000000000000064, 0x0, 0xfffffffffffffc64}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0xffffffffffffffb6) 13:03:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) 13:03:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xf, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x2, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x19, &(0x7f00000000c0), 0x4) close(r3) dup3(r1, r2, 0x0) 13:03:20 executing program 5: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x200080, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000bba000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000100)={0x5}) close(0xffffffffffffffff) creat(&(0x7f0000000140)='.\x00', 0x0) close(r2) lstat(0x0, &(0x7f0000000440)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setpgid(0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 13:03:20 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)={0xd1, ""/209}) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x3, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) pipe2$9p(&(0x7f0000000200), 0x84800) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x92) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0)="771163937821278586f081c562005bc1ef5471d0cff95405a2", 0xfffffffffffffef1) read(r0, &(0x7f0000000300)=""/250, 0x17) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x4, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x40000) 13:03:21 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 13:03:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:21 executing program 5: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2861}, {0xfffffffffffffffa}]}, 0x18, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 13:03:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x8, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 803.756680][T22572] binder_thread_write: 4 callbacks suppressed [ 803.756690][T22572] binder: 22571:22572 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:21 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffffffffffff13d5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) r2 = socket$inet(0x10, 0x2, 0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x4208, r3) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b93c564b636700000000b4ce360000a299b7f4d0e305952f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000140), 0x300}], 0x1}], 0x49249249249270a, 0x0) 13:03:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000005480), 0x80, 0x0}, 0x80000000}], 0x3, 0x2, &(0x7f000000a800)={0x0, 0x989680}) 13:03:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xa, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 804.032457][T22610] binder: 22607:22610 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read$alg(r1, &(0x7f0000000300)=""/241, 0xf1) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:22 executing program 3: r0 = socket$inet(0x10, 0x1, 0xb) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xe, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:22 executing program 5: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000380)="b709f10886053708eb9adec878705bf0b0507ed53b9f51f1272931e0ec1e5db03bc73b00af60d97f1b8a79ebb4e2a4f1606c67b9da8256acf9d00d1272f3358c43b2c888edb6312a751ae79216657f56aa097eb326cb53f6b1a4153025da771eebbc28100c1d7511ef0cacffc9d480b8a9ed7474621e3474e7949d243d7a99e047183ff2034f4a20dd632169c0e56642625e27c83c4703eff04b67bc21889d4921fe4c3d10fd2bc71c89d2ff3e1e077acfa8f1f41b095a59308eeb843deeda259f1feeb0c935fd13a942", 0xca, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='status\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000500)=0x10) getsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000005480), 0x80, 0x0}, 0x80000000}], 0x3, 0x2, &(0x7f000000a800)={0x0, 0x989680}) [ 804.709676][T22631] binder: 22630:22631 unknown command 25349 [ 804.716887][T22631] binder: 22630:22631 ioctl c0306201 20012000 returned -22 [ 804.739633][T22638] sock: process `syz-executor5' is using obsolete getsockopt SO_BSDCOMPAT 13:03:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:22 executing program 3: r0 = socket$inet(0x10, 0x2, 0x8) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 804.757173][T22643] binder: 22630:22643 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:22 executing program 5: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r0 = add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000380)="b709f10886053708eb9adec878705bf0b0507ed53b9f51f1272931e0ec1e5db03bc73b00af60d97f1b8a79ebb4e2a4f1606c67b9da8256acf9d00d1272f3358c43b2c888edb6312a751ae79216657f56aa097eb326cb53f6b1a4153025da771eebbc28100c1d7511ef0cacffc9d480b8a9ed7474621e3474e7949d243d7a99e047183ff2034f4a20dd632169c0e56642625e27c83c4703eff04b67bc21889d4921fe4c3d10fd2bc71c89d2ff3e1e077acfa8f1f41b095a59308eeb843deeda259f1feeb0c935fd13a942", 0xca, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='status\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000500)=0x10) getsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:03:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x10, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40c0c0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 805.012487][T22661] binder: 22658:22661 unknown command 25349 [ 805.059796][T22661] binder: 22658:22661 ioctl c0306201 20012000 returned -22 [ 805.102341][T22666] binder: 22658:22666 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:23 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x13f, 0x100f}}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 13:03:23 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x60, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000005480), 0x80, 0x0}, 0x80000000}], 0x3, 0x2, &(0x7f000000a800)={0x0, 0x989680}) [ 805.641839][T22687] binder: 22682:22687 unknown command 25349 [ 805.666100][T22687] binder: 22682:22687 ioctl c0306201 20012000 returned -22 13:03:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:23 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', 'IPVS\x00'}, &(0x7f0000000280)='\x00', 0x1, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x47}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb07}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe4a0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000002c0)) [ 805.690908][T22694] binder: 22682:22694 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x1b, &(0x7f00000000c0), 0x4) close(r3) dup3(r1, r2, 0x0) 13:03:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x1a0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:23 executing program 3: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$inet(0x10, 0x0, 0xb) userfaultfd(0x80000) sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff87, &(0x7f0000009ff0), 0x1}, 0x20000000) [ 805.914783][T22713] binder: 22711:22713 unknown command 287493 [ 805.958302][T22713] binder: 22711:22713 ioctl c0306201 20012000 returned -22 [ 806.007558][T22721] binder: 22711:22721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x50500) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000300)="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") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 13:03:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x300, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:24 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) 13:03:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000005480), 0x80, 0x0}, 0x80000000}], 0x3, 0x2, &(0x7f000000a800)={0x0, 0x989680}) [ 806.539535][T22741] binder: 22738:22741 unknown command 287493 [ 806.575468][T22741] binder: 22738:22741 ioctl c0306201 20012000 returned -22 13:03:24 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="d806019ab27b392d590385547bd6279fbd0895cbd14e579e7b6cd743d58ff98de974d872320dbc30ae89ef6804ac38dadb30f5916cc30f9e61a87fccad56922074e840d95b5b4b4ac465680bef2649981cbe15530a2c84ceee5508dc4f0e671270d05aa9a2ea5b5c7ee81cb72731", 0x6e}, {&(0x7f0000000140)="113f2c0e", 0x4}, {&(0x7f0000000180)="ed27ddee2e31cb401a5322259bdcb92298fb32b619624c76c7cee48d9939", 0x1e}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="50000000000000001100000000000000efd337ffb209eb95d05f4350dc3ae24b1573a05d33d6e2e68f36ee67c9d3612c608759a59e40633caac7eea88d0c56fad3467185cae4aaace7ae309a00000000592a88d828378cc3e7014b3b7d128739d3caf2adf6e98e5de196dedf72331ae795fe7befe59ae6b0c3a07fc27efff0ea9105401d69cd1a725fa47ff091e43013c812cb41337471d21383beddd5e43feaa20da9effd104773a46e84e2501639fda0a6e9f6e1135c5ddbd33ab4f772d5c0cbfea63693a9608d18ac25beefc88c526c38cfb4b40b84e76e1efdf8267e870419a19015b8bfae54755e0298675d179dbfab196b5dd98c404d4a817c8c7650f8e97a03d53ffd9d940b306f0cf8db99c359cf32dc125015"], 0x50}, 0x6}], 0x1, 0x4) 13:03:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x62f, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:24 executing program 5: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x800000000000002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) [ 806.584891][T22747] binder: 22738:22747 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:24 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x440000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) 13:03:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xa00, 0x0, {0x7592da11}}, 0x14}}, 0x0) [ 806.815659][T22772] binder: 22766:22772 unknown command 287493 [ 806.883127][T22772] binder: 22766:22772 ioctl c0306201 20012000 returned -22 [ 806.891297][T22775] binder: 22766:22775 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:03:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="400026bd7000ffdb1f0012000000100001000c0002010800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000108000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000000e6ff00000a0000000c00070008000400161e4e040000797a310000000054000700080004000900000008000400020000000800040001000080080004b130e3cebd0722f66e4600ffff0000080004001241000008000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f0000000300)="1f118e594d1db0b68f3bf6a57efdfa2b5263eab8bf6b00d8dab5a97ee65fbe24a9f0881d68df42f816c9b16e3e93c22483f5adcdf6c562467bc5fb5661533d84e6b293f9abefd27bd08db2225bea95dd63267625301927df1a78f155b81c0cea0bb8cb0bed267734c36e36429b71699cbeb7", 0x72) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x22, &(0x7f00000000c0), 0x4) close(r3) dup3(r1, r2, 0x0) 13:03:25 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x30800, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x6, 0xfffffffffffffc00}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0x8, @loopback, 0x3}}}, &(0x7f00000002c0)=0x84) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) 13:03:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xe00, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:03:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 13:03:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xec0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2000000005, 0x2) accept4$nfc_llcp(r0, &(0x7f0000000200), &(0x7f0000000040)=0x60, 0x80000) fchmod(r0, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0xffff, 0x4) r1 = socket$inet(0x10, 0x3, 0xfeef8a9) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 807.626304][T22807] binder: 22803:22807 Acquire 1 refcount change on invalid ref 0 ret -22 [ 807.654477][T22807] binder: 22803:22807 ioctl c0306201 0 returned -14 13:03:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:03:25 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x44000) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xa9, 0x5, "0102fe648ade2d8a7816cbab3c2a367eb12889257ce6d1db5465a7ba76c646672e183b55b7fdf95215637ca26b27792441e7e37ad152bdd0e0e9f710c15130aa1519d50116079511bbc64c0658ba593176e9b82a6c4c2020763f980e8da12897e0f920f40fbca3611e3603becad8ef343cad08e6a00388d4a8c93e3926b12dc7207c1b44c3f2efb1f020ed719e6c5e6ce27ccc6e749f7f71677f441b8b35f3b4d0"}, &(0x7f0000000180), 0x1400) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000300)={0x3, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000340)={0x8, r2}) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf00, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 13:03:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:03:26 executing program 3: r0 = socket$inet(0x10, 0xf, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 13:03:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x2f06, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:26 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "02711516815316792d0bfe54e281a954"}, 0x11, 0x1) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:03:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x2e4, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x80000080000082) 13:03:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:03:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x6000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:26 executing program 3: r0 = socket$inet(0x10, 0x5, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:26 executing program 5: syz_execute_func(&(0x7f0000000080)="ba66440f50f564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bd31919") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x3ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f0000000240)) 13:03:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:03:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x14a, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000340)=0x6) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xc00e, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:03:27 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x400400) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x3f, 0x7, 0xb9c8, 0x8e}, {0x8001, 0x5, 0x393, 0x3}, {0x21b, 0x2, 0x0, 0xffffffff}, {0x0, 0x400, 0x5, 0x1e}, {0x9, 0x8, 0x101, 0x7fffffff}]}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:27 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x34000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:27 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) futex(0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0x5}) 13:03:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000002a80), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffe2f) r1 = memfd_create(&(0x7f0000000a80)='\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001440)=""/58, 0x3a}, 0x30}, {{&(0x7f0000001480)=@can, 0x80, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x2}, 0x10000}], 0x3, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'ah\x00'}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x2001001, &(0x7f0000000180)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000380)={[{@grpquota='grpquota'}, {@nogrpid='nogrpid'}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 809.440499][ T2426] device bridge_slave_1 left promiscuous mode [ 809.446776][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.474159][ T2426] device bridge_slave_0 left promiscuous mode 13:03:27 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) [ 809.484342][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state 13:03:27 executing program 3: r0 = socket$inet(0x10, 0x402, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x222000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 809.655341][ T2426] device hsr_slave_1 left promiscuous mode [ 809.715757][ T2426] device hsr_slave_0 left promiscuous mode [ 809.738073][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 809.745628][T22928] EXT4-fs (sda1): re-mounted. Opts: grpquota,nogrpid,jqfmt=vfsold, [ 809.790113][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 809.810699][ T2426] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 809.824320][ T2426] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 809.903818][ T2426] bond0 (unregistering): Released all slaves [ 809.948902][T22919] IPVS: ftp: loaded support on port[0] = 21 [ 810.066516][T22919] chnl_net:caif_netlink_parms(): no params data found [ 810.109372][T22919] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.116927][T22919] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.125199][T22919] device bridge_slave_0 entered promiscuous mode [ 810.133646][T22919] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.142042][T22919] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.159788][T22919] device bridge_slave_1 entered promiscuous mode [ 810.197543][T22919] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 810.223654][T22919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 810.257983][T22919] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 810.268738][T22919] team0: Port device team_slave_0 added [ 810.282272][T22919] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 810.290826][T22919] team0: Port device team_slave_1 added [ 810.296976][T22919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 810.305294][T22919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 810.334530][T22919] device hsr_slave_0 entered promiscuous mode [ 810.343478][T22919] device hsr_slave_1 entered promiscuous mode [ 810.355042][T22919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 810.365095][T22919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 810.395180][T22919] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.402298][T22919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.409633][T22919] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.416731][T22919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.489154][T22919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.501224][T22919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 810.520471][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 810.528965][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.544298][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.561238][T22919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 810.568013][T22919] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.586310][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.602198][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.609324][T15860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.647649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.659334][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.666540][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.682362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.695866][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.719633][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.735037][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.746486][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.760632][T22919] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 810.767351][T22919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.796424][T22919] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 810.818558][T22919] 8021q: adding VLAN 0 to HW filter on device batadv0 13:03:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r1, r2+10000000}, &(0x7f0000000340)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:29 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) socket$inet(0x2, 0x2, 0x9) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0xfffffffffffffe98}, 0x0) 13:03:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x20000007}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) tkill(0x0, 0x0) 13:03:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x400300, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf0ffff, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:30 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:30 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000100)={0xb4, 0x101, 0x7, 0x1, 0x417}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x118) r2 = socket$inet(0x10, 0x2, 0xc) connect$unix(r0, &(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000017c0)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000340)="5b8aa7a3ab04219cdfd7e495d1f9194dbd1840042c03dff4314e82d73a7ec27a2ab3005dab560736d6758eb240f6d0cb536ff1077b", 0x35}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="a84eb6fc846e3f925ec1a4dbecb511d054b4fe2f0d25e5c398421f03789a072b070bd4b815d4e15d75a312ba1a7210349e6ba0109ed42b4f81bfc19e36b3256ba068aee962fc4e82ae9cf4634f996995ea0c68a7a222035d894fa1d96fd339d2491335997e0c71965cd066c349a954b8888653cb", 0x74}, {&(0x7f0000000440)="6ee0841b1ec6bce0bba9eb323d7e96917e2abef75a32b62883570744867fd5bb3a457e167a02f1fa84767ee7058e25302a7cf7a4aa932b910a4cb78904bf8488f1a4a927df832a61dac7ff03fa5594c9814bc071ac3d237d461d57a5f2a4d28e222a2c930027737ea812d8feb68ddec055ec207a5128f51c0b6d25888aefa2e322148e78cbf41f3fe9e41f71162e7394eeb783745bf58f556e46b2529a9d73e77e4a5f3e0d74373c5528456adb4e2d", 0xaf}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="8fc073bad70bb8643aa2495214d63e27226ee850aea526c25f9a72eac03be9d09658c7d5ccf347d98f3ef61f8aecbbbb5bd13ff88e06c281c00982a6a35a9a56a27b1e1015804059ef86659efa2e5c5729e6c51ab232c97c050db5e6e9513a20eeddaec4d7a57b0568300523e44d024893ca4d0dbaff1d", 0x77}, {&(0x7f0000001580)="f7bb1e21b6069ecfca2b3aa8160c717cc711daa1b4f1139f67dae57bbff5b435037bb62f8a1c466e48f95e9592c2cf6d5432be3a517b4f84", 0x38}, {&(0x7f00000015c0)="9c19a4ed58d5480d1af4b7d7428cc522ce251702d529f394490dc96d2d5d8e7d1283e7cd8cf2524ebae46974640b3d3e3a70fb878a875c248b1154297bf5c92820f441c5f349d0be0f16e3294852946d0d28ff", 0x53}, {&(0x7f0000001640)="554c171cb6f9d5391fdc1016f1f32677073f4ce8f6d79ea05403eeff10c24385d10440409da92b7ab5ac05771f2c4935d8b08f480fbdf06e8d33cb4ccc8991adeb451c659abee7258fdc57d2af6011c2394e364969cc5b414e4fb51cc81dedf2de697d22ad700b99860d5bf26bef88926721431a2ee6da7b818c74c56ff5982a978ad6dc57676d535c55c7aac1", 0x8d}], 0x9, 0x0, 0x0, 0x4000010}], 0x1, 0x1) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x1000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x2000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:30 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x93) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="e6ffce91f0935bad8ef9523bb7d7820585df76f822708814a1611fea598008c43e0b3faf7e17a343b43cff40e1889b724e8c836c80637aa2040c115de828da0d7ba9d59cd4fbc451d8760934f21bdd587710e89efeab8295fe61ef2276e3287a0b94f45b31a1fd9a94bc0c52a964d60f8c5d6bd7b4abeff476787c628fd7b219534db80538e06679543582aae5a71c54ddff75ff26d209874ef58579783ecef1252c7fd2857d68dc96209947e2be101fad5bc288d6446eaeecaf6013bbc2ac873e3ae2bdc99ae25f13ad914bf8c469972f6d52787e3513dec2dab1db001a2dfd491ee792ef4f7d596e888848", 0xec}, {&(0x7f0000000140)="bc26bb0da36e632343a6c13492e68884952514fc62f11b8f3c9485f2e57d875ea83e624f5304d9e7f7c633e7aa10ffe49dfa3cb6b884e892563ab864f4144c1451d108796c0c0c94b6c69b098c3233d655", 0x51}], 0x2, &(0x7f0000000340)=[{0x78, 0x115, 0x5, "1fd0d251929d24e446193bfc7dc3daed6f5b3930f092198fbdfddf27b0cc2f3f96c28dc994517e0db185b032c9b1a322f783350a7809aedef3863ac0e861dcf35af1f7e380ee8c6bf17361cce0be58ac9cedbd656db305d5d41b7e17266384eb56bfeb66f7"}, {0x30, 0xff, 0x1, "0c466916281eca259423cbb4cc4d059a2c29aaecabed574fa73e52"}, {0x10, 0x29, 0x23f5}], 0xb8}, 0x40) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x8) 13:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x3000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80000420000) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b27fa4244fe5ffefdbd3c84ce0f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b007f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffff20bb9f167456aea1ff080002000300000008000100030000000800040003000000080004f5dc76ee3e0df35b47615d81398a007fff00000800030003000000240005000800010065746800cfaf157469620000080001f588007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c0007000800e700161e4e00797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca00000800030000000000080001000900000008000400060000551161f700080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bf5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d457263bef7755c6f180979eb38946df8fecec8171cb29de83cac7c993007280c1a9db79aa275d0274622b7dbbb2a8a7fe408629debb9c28c93c757e096d0eb6a1a12f096636ec01148de5e2c01439e9c3757616e601c4f20000000000000000000000423731f11e990fad7ada08016b5f4bac4ab8d72351bd60e1de2a6f7bcd677871d441c8806f1092d70e494ca1e2e99167303e85a4d88d6af1058186fb36686c946be242f88370acdab5681ab4257f8fe02cb812"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:30 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00fbdc0409541d8c9e88062fd16cabb33765b07794b38267ec9376ace37f61dafb36410f6e06a1ef6c2fbedf4bd40e02aad4f35f36237f155998cecf0b4a6123181fbf64d98a29e93c51313365ed61c3e4ed4bb3de9854f3d400c85fcde5545ca179a7baf1dde838a8b8906e4bd5710ce13895334ab0c691ba6524f1af7bf0b66df3acb3ea04e322e8c26e589c308dcbdf453f64e2faa854e7be17d0bc858bbc11ef480436c43ef5fa4fde907f4a1a1d08f4afee7dbb982a0fdf2b99a4d5edddc9b9190a9b47165c25b8b4807762f2e3ce"], 0xdc, 0x2) 13:03:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x4000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:33 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x8000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:33 executing program 3: r0 = socket$inet(0x10, 0x2, 0x8) r1 = dup3(r0, r0, 0x80000) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000005000/0x4000)=nil, 0x4000}) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xa000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:33 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="2a7990af97f74e528cbeece59b58777d65cd1899206bb5659ddd2df4e308ac533fa85c54e9cb6fa6709af97096b541659ccce411e7c54365f3b99ec29b849dd94434d0e17255d2fc85bd0a6176c4427e", 0x50, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000001740)='rxrpc\x00', &(0x7f0000001780)={'syz', 0x2}, &(0x7f00000017c0)="a60f0d1c7371", 0x6, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001680)=[{&(0x7f0000000200)="ba7baaaf6368740fa9c0b37fa0c86835288d286e811f69032a857e1ef72617c1ac862cf6b57c4e2b7f060115eceec1298e74520d14af6f870261742eee62dcb201231cd9df66e678970c91d507febd02ab0e716f4672d15a29ba70d4a00a401aa751b0698dcb2c05d35d2cfc40d2ac0dbfe0891cc06b212c10d781e64a800273b42bb1da361ac811f06427d24cc41d002a", 0x91}, {&(0x7f00000002c0)="591b48138d5c468211dacf3f7f104143e659126e46667482ac4ad406ebc37da023369bd0be94df9da0acf47a1442ad6890d668ec23b745e87b0a82297cb6fa13da19fef3dfc2046160d96e241d605c292ced491ba3967a230bfd5186b58480fc5f990f85433ee714453e2c439c553585c6ec530cd5247f4d6996919361c6c50cd27c88", 0x83}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="6031652c819595beb1c94b56c8b7907f4b2dd59f4e9d50024dcdbb42e2ee8fba114088f52a8df428bbbba7ca3587a1ce05b8c7c11cd4864367e56b2ed94ddb18330e", 0x42}, {&(0x7f0000001380)="5f06800a18003bbb5862a852ef72d39b44bbe1c5f9d75527d36b77d618b6d14b028446cfb095512b1c1bccd0dbdc420382f9a449894dbdbea8455be5b14f2bd87302195c5e1175f4d6514372ec5af8b5662706f08016fbeec488575a2ca250822af012640cdaf74f7c2a93b507e3bd913a3b47c214d2928d582c630231898ce4ab850d36411d68f42d1ce6fe0a27a62e4847c9ae5efd230cfdc21bff56a4634d3238c75b", 0xa4}, {&(0x7f0000001440)}, {&(0x7f0000001480)="985e80d18e991d6a88998c65c909046d4dd16015fc003f4a0654f65cc7e5e532d8b0b65c4744e0acaeaab40a29b2f6c362318770da57d3962a8e1056489a19fe51a08edeb8685d496378b03cffa990", 0x4f}, {&(0x7f0000001500)="371f41c0b80e02c8704a7e7077d8a1b5561ac8c99c838bea1981d1851f4c732c178a808979bb6a3666aa7368cc79c24b720378b2e65260cba66747f14ad771cfec30cf117fe43c3dc4f325a53241444273176e3ee573d7ceb0abb0c746b0826af4e403482d8c2633dddb8a6ad24c055c6cfef068e017fbf36fd56816652d402c60818885132adc7ce2b12ec9650c3a0064aa8ef5a4d0cea9c2213a4c71", 0x9d}, {&(0x7f00000015c0)="71963160f6313f38d49c95a5767b92ec0b4978ae675b406e3735249fc48e86e76e74091c392c96a7e7e783b59339f5b735c0f9376efd4da4728c23b6e9", 0x3d}, {&(0x7f0000001600)="2b8c5983ced59334616977d43f48ce60d19eb6e88bd70563c7de810478eaf11629d139561c3da49ea75662a485213f4f8fcd82038cee9888bf07d8af0cb939d21b829c5d5f5b3554356f4a89169e97a001b7d91dda7c09", 0x57}], 0xa, r2) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xe000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:33 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$invalidate(0x15, r1) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x10000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:36 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:36 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 13:03:36 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x2f060000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x60000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:36 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x9effffff, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:36 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000880)={0x1, 0x0, 0x2080, {0x6000, 0x4}, [], "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", "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"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@empty, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="4fd08b5a2eced5bf8f5bcba29f79bf4c482f84a0c958448ecb2b05445881eeab797a74dbe2f73b2640c1a5a5bc7c348ec1da8150d2cf12d17fd1baa1ca9884f132847575965a48250535ebe8205233eb83d0b67c54114972e8b86a57c0a4d6300370606611d3f3a0658ccec24e93428ee487edbde2e469ef2f62c67c0a0d05ea5e5f21414c78cf1f11dc0eacb3040b1a8f3b43a660492719e18ccf8b4f0a88be58731a2ddecdb61449d86f05b29a8bbc6b2764434b22ffcb6d56b75851d050", 0xbf, 0x5}, {&(0x7f0000000180)="1b1afd5c52fa026e45b8ca7e9bcfd8989494218cf130454ef28d13d0b24b5ca400eb4dd8b504f0bcf53859ee45a11853046603becf6975d08cded86bff5cc120209c8f9bb27924af30fe9bda3b5da6342a42be7fc4abba9a6d2f21b046e9ce0a84a40f53b1196e35fdd05ca744dae81df8a0d1cfb749768a25f6b0fc27f285910d8368b032b1d30ad1588ec82aecf02847536e7de4534460c06b21a76f", 0x9d, 0x7fff}, {&(0x7f0000000240)="83564cbe178726f4a0078b29605fc33dbf9b37b41a073dd6d1a93c957c88e695529d426653d63361891bd9a1bdc8c49984b968d2f91040bb90515f51eb1ae2ecc8f4a82f14bb17a04f1d1d46e2ccdbfcf34a224bc344d770fd85f41a4e0ab416b387258607bb2a8824ed3e1dd2d67a2c760ba7386157e09256639b69fc4e92983f536a65feb09f456439ce97999a7c4dc73cdd9e2b2561c6eb8da69153bf8c14cff4bf5b", 0xa4, 0x317}], 0x800010, &(0x7f0000000740)=ANY=[@ANYBLOB='nodatacow,subvol=md5sumvboxnet1nodevFbdevGPLsecurityem1self,enospc_debug,autodefrag,dont_measure,uid>', @ANYRESDEC=r0, @ANYBLOB=',dont_appraise,euid>', @ANYRESDEC=r2, @ANYBLOB=',uid=', @ANYRESDEC=r3, @ANYBLOB="2c646540a26f66746578743d757365725f752c00"]) r4 = socket$inet(0x10, 0x2, 0xc) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0xfffffffffffffffe) 13:03:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xa0010000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:39 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:39 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = socket(0x40000000002, 0x803, 0x4000000000000082) recvmmsg(r1, &(0x7f00000001c0), 0x400000000000006, 0x1, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xc00e0000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf0ffffff, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:39 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200000, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) 13:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xfffff000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:39 executing program 3: r0 = socket$inet(0x10, 0x5, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:39 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x94}], 0xfffffffffffffac, 0x0, 0x1c6}, 0x0) 13:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xffffff7f, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:42 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:42 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x129400, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0xba5, &(0x7f00000000c0)=0x1) 13:03:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xffffff9e, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) 13:03:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:42 executing program 3: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/47, 0x2f}], 0x4, &(0x7f0000000300)=""/70, 0x46}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000440)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1e, r1}) llistxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/77, 0x4d) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xfffffff0, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:42 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x1a0ffffffff, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:42 executing program 3: r0 = socket$inet(0x10, 0x2, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0x9) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x4, 0x10000, 0x0, 0x101}) signalfd4(r0, &(0x7f00000000c0)={0x7}, 0x8, 0x80000) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:03:42 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x40030000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:42 executing program 3: inotify_init1(0x800) r0 = socket$inet(0x10, 0x2, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x100000001) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'syzkaller0\x00', 0x7ff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010707071dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80004000) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xfc, 0x6, 0x9, 0xa, 0x70bd2b, 0x25dfdbfb, {0x7}, [@nested={0xc, 0x53, [@typed={0x8, 0x21, @ipv4=@multicast1}]}, @generic="4ba8e4af217efe4495195aa39c820ee29e1df38ec8b12097020082bcb5f689", @generic="af3d9c17e69fe51c6002e9104a2f30434b29e5237dced9b3bdf45b67bbec78bdcc48f59977329158a2a7c2e2ccfd8dbd891fbb93121ebde618fe4e963a5ec8c0d48df36052039f9fb0cad3b753ecf2ed0a90192e2de4ef87df16dc70259debd0cee44542466f3ec5d97f8775f19551f793fa51e161b2c47c1057caa42e3f526c395632601c67dc8ee76eefc3d2bd6252109f0a426fc8ef5d6e08a7dd3a4ba79e222feece65efdb7501707c587e8af69df0856b423f15791d4a907ddf"]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) 13:03:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf0ffffffffffff, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x840, 0x0) accept(r0, &(0x7f00000009c0)=@can={0x1d, 0x0}, &(0x7f0000000a40)=0x80) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000a80)={@loopback, @local, @mcast2, 0xfff00, 0x1, 0x2aa7, 0x400, 0x7, 0x10, r2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f0000000840)='./bus\x00', 0x40000000014103d, 0x120) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31090000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726a782c8ae2b87f0ef347157f117d6d66c76fd2d30b8ab874c6a28227d0a94797654d3cd387b293aeae0c7abe40d5d53f5b6d6d68efc3060eb1a0fb290809c851957230483a75fee926e0d7873e9e7290485bd"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) 13:03:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x100000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x200000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:43 executing program 3: socket$unix(0x1, 0x7, 0x0) memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) dup(r0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfff, 0x6a15, 0x4, 0x9}, {0xc57, 0x8, 0x5, 0x1}, {0x10000, 0x0, 0x3, 0x3}, {0x4, 0x44a, 0x5, 0xe9d}]}) syz_open_pts(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000000000001, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x7, 0x6}}, 0xe) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) 13:03:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x300000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:45 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:45 executing program 3: socket$unix(0x1, 0x7, 0x0) memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) dup(r0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfff, 0x6a15, 0x4, 0x9}, {0xc57, 0x8, 0x5, 0x1}, {0x10000, 0x0, 0x3, 0x3}, {0x4, 0x44a, 0x5, 0xe9d}]}) syz_open_pts(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000000000001, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x7, 0x6}}, 0xe) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) 13:03:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x400000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000c80)='./file0/../file0\x00', &(0x7f0000000240)='mqueue\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 13:03:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x800000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xa00000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000c80)='./file0/../file0\x00', &(0x7f0000000240)='mqueue\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 13:03:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xe00000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000c80)='./file0/../file0\x00', &(0x7f0000000240)='mqueue\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 13:03:48 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf00000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x7e0}], 0x1, &(0x7f0000001680)=""/72, 0x3e}}], 0x1, 0x0, &(0x7f0000002240)) r4 = socket(0x0, 0x1, 0x8200000000001) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r5) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) 13:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x1000000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000c80)='./file0/../file0\x00', &(0x7f0000000240)='mqueue\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) 13:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x2f06000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x6000000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000c80)='./file0/../file0\x00', &(0x7f0000000240)='mqueue\x00', 0x0, 0x0) 13:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x9effffff00000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:03:52 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xc00e000000000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x200000, 0x9) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x610, 0x100070bd28, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}}, ["", "", "", ""]}, 0xfffffffffffffdb6}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xf0ffffff00000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:03:52 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xffffff7f00000000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xffffffffa0010000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 3: mkdir(0x0, 0x0) 13:03:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffffffffffdbd, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000100)={0x7}, 0xfffffffffffffed2) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0xfffffffffffff000, 0x0, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x807, 0x2) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) write$UHID_INPUT(r5, &(0x7f0000000300)={0x8, "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", 0x1000}, 0x1006) 13:03:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x2, {0x7592da11}}, 0x14}}, 0x0) 13:03:52 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:55 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x3, {0x7592da11}}, 0x14}}, 0x0) 13:03:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x1, 0x8200000000001) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000300)=0x4) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x440000000141042, 0x100) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffe79) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x4, {0x7592da11}}, 0x14}}, 0x0) 13:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:55 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:03:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x8, {0x7592da11}}, 0x14}}, 0x0) 13:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xa, {0x7592da11}}, 0x14}}, 0x0) 13:03:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:58 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000300)='./bus\x00', 0x92, 0x8, &(0x7f0000000880)=[{&(0x7f0000000340)="20d912e6e751228dd85cd1fc4efee696eb67b3800a18ef524de9be421898de46d8bb75047ea3cf1640f550bf5353fcb7317afdc72355f169d53b14800e6eb5c464ef5abdee652da40fd8eeca7c638c234972826e136a14ef98872a370acce29c9fdecd42f510d79bb15e2bdba7bc35d4d05668c663c72aba608479372ba72e56", 0x80}, {&(0x7f00000003c0)="5febc2bafb622fadb30ca2a510b573d9f9947c2a449a2cfea897a2aa941a3dbf391f17c9c90e71353d129b30da0d7933edd44b0fb688aacb7c51422b75d945ff4653ed269e24616874c3623512afc53f53ffe91fdd4781c33e87a3a21de50f30cc5b04f7d9bcae840ede5be5f1fdb26d223d42ed003748a12884cc875ffce71c720259a5713c014ebcfa964a578a43a8c8c2662653ae5d94603df61519c211d03a1533c62f680ff686a672737d7698a161fe8d6f252bc5ec87d078bb17bf4a825d182c229c84b5fa2c1dc3", 0xcb, 0x10897d19}, {&(0x7f00000004c0)="d20f4d78748aba9e729e3b06c139d89ce9608112310e7cd140d88ff523f2e39d0c685b565f590b2eddef0af87950e02bf76eca235cc982c29a84257d1f371a2229752d47458e99157cfbef902ae0abea213f583b611715270f5956883138002b0deee1071359989df2db901956f3e9756fccc2aeaa52e6f889c8cec61a1b234c561f7d89770c49909521688947d59732c9770cf8a58d18025e4d67cc0e3129dcb978d2b1d7a14413091b5a5dd5c88224823c726fb500c7ba080b8f6ed1bc4c933852f579576dfe21d6b7b9b5267f766042e637f861cc118267fe28cbcaed6d69ede1edb8e6", 0xe5, 0xffff}, {&(0x7f00000005c0)="292ef1d1bf9063bc12998e42b5a7a82fdfac7b361a052fa900b281d0a8d374ccb767cc69fbb42cf494d38ec4eb24c40452717a30393d88368d1fa056198445e245379ac39ad653267d601f46c5460dfa5f4ee1", 0x53, 0x1}, {&(0x7f0000000640)="f03f93fd6be9b37daf4cbea0c9b4a1042a6b9376ba62eb78ccbede3609a40c26ffaa0bb4b40ddfbc61e2bf3870d9bc60c7ac3c14928d1f90a3c6e24892eb9c5ec4e9b39180167d52f9092c1f2f87c1bd6a8eb5e4b48b6fc431710eaea23aa756c1986c7f95d7409a11f68b6ee1b1afbd46f6f0a66c8b502cefff8eb49b2ad90db94f5e7d9570e0aefcad1657af691dc36029b6a3d403c7f824806dda9b7eb220b3335a2cc3a4aa1bedfbbf499ed71ae95dabc7d550c48b71cf19568b18c3b9f9b600440f4c1a6ce0fa3831b1508734445b49930efac77a14fc2da6f2ca45b7a6a4c8d91eebf46d", 0xe7, 0x9}, {&(0x7f0000000740)="ac25c10255", 0x5, 0x4}, {&(0x7f0000000780)="9413916ae6c8e37d5ff268aa7e15490ed997d2de78fcb767e16365d4cf868dfcc4", 0x21, 0xcbd}, {&(0x7f00000007c0)="93fed5d84dd0104585754cfe8fa02ea797abeb25bc381e927b089a50d2a5b66472b817ff6dea3f1114ae37e2e966d2c99b39a7c8275071aec89d3db9591ee0c55f76910389ad70c6b762b6af18209eb796034d89f2fe9ec77a4fa199d60f46995501c0f8b1ad3907812263d588157999b9bc36ce79378d64f9fab2e5c8b2fe786b36906f30791368b380106e1b00685eec816494c0ad97eae2ea2305b8089c9dd2e80dae42890b8ce07dc205466f16", 0xaf, 0x6}], 0x1200000, 0x0) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 13:03:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xe, {0x7592da11}}, 0x14}}, 0x0) 13:03:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf, {0x7592da11}}, 0x14}}, 0x0) 13:03:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x10, {0x7592da11}}, 0x14}}, 0x0) 13:03:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:58 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r2, &(0x7f00000001c0), 0xffffffffffffff65) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r5, r6, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:03:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:03:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x60, {0x7592da11}}, 0x14}}, 0x0) 13:03:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:03:59 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:03:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf0, {0x7592da11}}, 0x14}}, 0x0) 13:03:59 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:03:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:03:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x1a0, {0x7592da11}}, 0x14}}, 0x0) 13:03:59 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:00 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:04:00 executing program 3: fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000380)) 13:04:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x300, {0x7592da11}}, 0x14}}, 0x0) 13:04:00 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:00 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x62f, {0x7592da11}}, 0x14}}, 0x0) 13:04:00 executing program 3: r0 = open(0x0, 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:00 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 13:04:00 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xa00, {0x7592da11}}, 0x14}}, 0x0) 13:04:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000380)={0x2, 0x4e2a, @local}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x240) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000300)=0x1) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xe00, {0x7592da11}}, 0x14}}, 0x0) 13:04:01 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) 13:04:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xec0, {0x7592da11}}, 0x14}}, 0x0) 13:04:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:01 executing program 4: fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) 13:04:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf00, {0x7592da11}}, 0x14}}, 0x0) 13:04:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:01 executing program 4: r0 = open(0x0, 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) 13:04:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x2f06, {0x7592da11}}, 0x14}}, 0x0) 13:04:01 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000001c0)={0x80000001}) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:02 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) 13:04:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x6000, {0x7592da11}}, 0x14}}, 0x0) 13:04:02 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:02 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x10000103) 13:04:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:02 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xc00e, {0x7592da11}}, 0x14}}, 0x0) 13:04:02 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:03 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) 13:04:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf000, {0x7592da11}}, 0x14}}, 0x0) 13:04:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040), 0xffffffffffffff72) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/61) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:03 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x34000, {0x7592da11}}, 0x14}}, 0x0) 13:04:03 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) 13:04:03 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) 13:04:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x400300, {0x7592da11}}, 0x14}}, 0x0) 13:04:05 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000380)) 13:04:05 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x0, 0x0, 0x10000103) 13:04:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000300)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000008000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380)="0278b1122875279f26e87fa71b5ab0c7357ae5ae8b0ef1c90fb1b1ce35d384fa9ba1863e154cdabd6e74c9f92211bcefedd1105330927f4e3b196f5de9575cd2ca867f492b4630e8a8f6ca5c76263a92e223daaf1ecd6a5f3ab5889da07ba2c6756098715c07", 0x66, r1}, 0x68) 13:04:05 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x0) 13:04:05 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141041, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) 13:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf0ffff, {0x7592da11}}, 0x14}}, 0x0) 13:04:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x402c542c, &(0x7f00000000c0)) 13:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x1000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:05 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r1, r2+10000000}, &(0x7f0000000340)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x2000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:05 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x3000000, {0x7592da11}}, 0x14}}, 0x0) [ 847.958352][T23917] binder: 23916:23917 Acquire 1 refcount change on invalid ref 0 ret -22 [ 847.973790][T23917] binder: 23916:23917 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x4000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:06 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x1) accept4$alg(r0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x2, 0xffffffffffffff06) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYRESOCT]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000380), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x4, 0x80100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, &(0x7f0000000600)=0x8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4={[], [], @local}}, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000640)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x1c\x9e\x00\x02\x00', 0x811}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000740)={0x6, {{0xa, 0x4e22, 0x5, @mcast2, 0x7f}}}, 0x88) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) fremovexattr(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r2, 0xfffffffffffffffc}, 0x0) sendfile(r3, r6, 0x0, 0x800000000024) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 13:04:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x8000000, {0x7592da11}}, 0x14}}, 0x0) [ 848.647758][T23939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 848.659109][T23939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 848.744917][T23939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:04:08 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xa000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r1, r2+10000000}, &(0x7f0000000340)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:04:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) [ 850.786688][T23969] binder: 23968:23969 ioctl c0306201 0 returned -14 13:04:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xe000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 850.835671][ T7548] binder: undelivered death notification, 0000000000000000 13:04:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf000000, {0x7592da11}}, 0x14}}, 0x0) [ 850.959581][T23988] binder: 23986:23988 ioctl c0306201 0 returned -14 [ 850.976153][T15860] binder: undelivered death notification, 0000000000000000 13:04:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:04:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x10000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') [ 851.121517][T23995] binder: 23993:23995 ioctl c0306201 0 returned -14 [ 851.154621][T15860] binder: undelivered death notification, 0000000000000000 13:04:11 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:04:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x2f060000, {0x7592da11}}, 0x14}}, 0x0) 13:04:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r1, r2+10000000}, &(0x7f0000000340)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x5d, 0x0, 0x0, 0x14) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) bind$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x100000000, @ipv4={[], [], @multicast2}, 0x20}}, 0x24) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) 13:04:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x60000000, {0x7592da11}}, 0x14}}, 0x0) [ 853.879409][T24025] binder: 24017:24025 ioctl c0306201 0 returned -14 [ 853.902462][T15860] binder: undelivered death notification, 0000000000000000 13:04:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:04:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xa1a, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x9effffff, {0x7592da11}}, 0x14}}, 0x0) 13:04:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xa0010000, {0x7592da11}}, 0x14}}, 0x0) [ 854.114484][T24044] binder: 24043:24044 ioctl c0306201 0 returned -14 [ 854.148307][T15860] binder: undelivered death notification, 0000000000000000 13:04:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 854.282568][T24059] binder: 24058:24059 ioctl c0306201 0 returned -14 [ 854.320051][T15860] binder: undelivered death notification, 0000000000000000 13:04:14 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xc00e0000, {0x7592da11}}, 0x14}}, 0x0) 13:04:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) 13:04:14 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000340)={0x0, 0xd4d, 0x6, &(0x7f0000000300)=0x7f}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100457468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf0ffffff, {0x7592da11}}, 0x14}}, 0x0) [ 856.920327][T15860] binder: undelivered death notification, 0000000000000000 13:04:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) 13:04:14 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xfffff000, {0x7592da11}}, 0x14}}, 0x0) 13:04:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) 13:04:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xffffff7f, {0x7592da11}}, 0x14}}, 0x0) 13:04:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xffffff9e, {0x7592da11}}, 0x14}}, 0x0) 13:04:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xfffffff0, {0x7592da11}}, 0x14}}, 0x0) 13:04:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 858.790620][ T2426] device bridge_slave_1 left promiscuous mode [ 858.796803][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.805017][ T2426] device bridge_slave_0 left promiscuous mode [ 858.811719][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.864220][ T2426] device hsr_slave_1 left promiscuous mode [ 858.876123][ T2426] device hsr_slave_0 left promiscuous mode [ 858.887291][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 858.898755][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 858.910941][ T2426] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 858.924830][ T2426] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 858.977955][ T2426] bond0 (unregistering): Released all slaves 13:04:17 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x1a0ffffffff, {0x7592da11}}, 0x14}}, 0x0) 13:04:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, r3, 0x1}, 0xc) close(r2) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x40030000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf0ffffffffffff, {0x7592da11}}, 0x14}}, 0x0) [ 860.322656][T24166] binder: 24165:24166 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x100000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 860.407983][T24172] IPVS: ftp: loaded support on port[0] = 21 [ 860.456029][T24179] binder: 24177:24179 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 860.597682][T24172] chnl_net:caif_netlink_parms(): no params data found [ 860.637662][T24172] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.644870][T24172] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.653232][T24172] device bridge_slave_0 entered promiscuous mode [ 860.661532][T24172] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.668617][T24172] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.676643][T24172] device bridge_slave_1 entered promiscuous mode [ 860.696933][T24172] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 860.706970][T24172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 860.726980][T24172] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 860.735215][T24172] team0: Port device team_slave_0 added [ 860.741606][T24172] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 860.749543][T24172] team0: Port device team_slave_1 added [ 860.755584][T24172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 860.763777][T24172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 860.784638][T24172] device hsr_slave_0 entered promiscuous mode [ 860.791268][T24172] device hsr_slave_1 entered promiscuous mode [ 860.797805][T24172] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 860.805561][T24172] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 860.821286][T24172] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.828351][T24172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.835732][T24172] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.842849][T24172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.880614][T24172] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 860.887431][T24172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.899057][T24172] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 860.909022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.917127][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.924801][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.933612][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 860.947473][T24172] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 860.954700][T24172] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.965941][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.974472][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.981597][T15860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.994359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 861.003188][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.010321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.033492][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 861.043366][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 861.066700][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 861.080480][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 861.094329][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 861.104000][T24172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 861.110902][T24172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 861.126536][T24172] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 861.139488][T24172] 8021q: adding VLAN 0 to HW filter on device batadv0 13:04:21 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x200000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/59, 0x3b}], 0x5, &(0x7f00000004c0)=""/19, 0x13}, 0x7}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}, {&(0x7f0000000ac0)=""/120, 0x78}, {0x0}], 0x5, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f00000041c0)=""/153, 0x99}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) setpriority(0x2, r1, 0x4) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x200000) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)="a86c5f7a5c9015b93212ef62428f842d5c81091358fd471c9d317e766e3b775f99539926d654b2c325501b7f6166a0dfd180c44dc21e38eae5f97c5e109b1c1b403ca1c8cb13b47f5cb801ff487b568d75afcb95e66b9493fe3692961aab8129ea22a810190cdc329953ab558d42f20c3ea80c4053987128267d58ff6a07af398f4f94e7b105c32b223f6b2edc79a5765804418b1d11a1c603711b0c240aa0598d9c1b556b6346527272a49dbd9d27a2d3127ce583999db573f4cf85a1289ac5", 0xc0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x300000000000000, {0x7592da11}}, 0x14}}, 0x0) [ 863.212087][T24208] binder: 24207:24208 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x400000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x800000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:24 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xa00000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0xfff, 0x75f, "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", 0xd4, 0xfff, 0x7, 0x2, 0x971, 0x40, 0x8, 0x1}, r5}}, 0x120) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r0, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xe00000000000000, {0x7592da11}}, 0x14}}, 0x0) [ 866.250355][T24253] binder: 24252:24253 Acquire 1 refcount change on invalid ref 0 ret -22 [ 866.282934][T24253] binder: 24252:24253 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf00000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 866.385561][T24269] binder: 24268:24269 Acquire 1 refcount change on invalid ref 0 ret -22 [ 866.406574][T24269] binder: 24268:24269 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x1000000000000000, {0x7592da11}}, 0x14}}, 0x0) [ 866.521524][T24276] binder: 24275:24276 Acquire 1 refcount change on invalid ref 0 ret -22 [ 866.536960][T24276] binder: 24275:24276 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:24 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x2f06000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:27 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x6000000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000a800)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:27 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x9, 0x0, [{0xa, 0xddd, 0x1, 0x81, 0x1f, 0x9}, {0xb, 0x6, 0x1, 0x78b4, 0x1f, 0xfff, 0x4}, {0x40000000, 0xfff, 0x0, 0xd7, 0xffff, 0x2, 0x6}, {0x80000001, 0x8000, 0x2, 0xcd, 0xfffffffffffffffa, 0x7fffffff, 0x7fffffff}, {0xc000000f, 0xa1, 0x0, 0x1, 0x6, 0x8, 0x51}, {0xc000000f, 0x3, 0x2, 0x5, 0x5, 0x8, 0x3000000000000000}, {0xc0000001, 0x200, 0x4, 0x2, 0x1, 0x4, 0xfffffffffffffff7}, {0x80000019, 0x1, 0x7, 0xe6c, 0x461f, 0x7, 0xad09}, {0x80000008, 0x8000, 0x4, 0x3, 0x6, 0x0, 0x1}]}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r2, 0x0, 0x6, &(0x7f00000006c0)='\x00\x00\x00\x00\x8c\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r6, &(0x7f0000000680)='attr/fscreate\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x106}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x158, r5, 0x900, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xefcf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x456}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x200040c4}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x9effffff00000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:27 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xc00e000000000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:27 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xf0ffffff00000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:27 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xffffff7f00000000, {0x7592da11}}, 0x14}}, 0x0) 13:04:30 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007680)='IPVS\x00') 13:04:30 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:30 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sync() sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') 13:04:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xffffffffa0010000, {0x7592da11}}, 0x14}}, 0x0) 13:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0xfffffffffffff000, {0x7592da11}}, 0x14}}, 0x0) [ 872.474409][T24365] binder: 24361:24365 Acquire 1 refcount change on invalid ref 0 ret -22 [ 872.525964][T24365] binder: 24361:24365 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da02}}, 0x14}}, 0x0) 13:04:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}}, 0x0) 13:04:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 872.648477][T24373] binder: 24372:24373 Acquire 1 refcount change on invalid ref 0 ret -22 [ 872.667954][T24373] binder: 24372:24373 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 872.753310][T24379] binder: 24377:24379 Acquire 1 refcount change on invalid ref 0 ret -22 [ 872.786977][T24379] binder: 24377:24379 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:33 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 13:04:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da06}}, 0x14}}, 0x0) 13:04:33 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0xfffffffffffffffe, 0x0}, 0xfffffffffffffdee) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x44c) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 875.421153][T24402] binder: 24398:24402 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da07}}, 0x14}}, 0x0) 13:04:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da08}}, 0x14}}, 0x0) 13:04:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 875.542483][T24418] binder: 24413:24418 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da09}}, 0x14}}, 0x0) [ 875.636790][T24424] binder: 24423:24424 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 875.771410][T24430] binder: 24429:24430 ioctl c0306201 0 returned -14 [ 875.781795][T24430] binder: 24429:24430 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:36 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da0a}}, 0x14}}, 0x0) 13:04:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x20, 0x0) 13:04:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0xffffffffffffff02) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0xfffffffffffffed8, 0x0}, 0xfffffffffffffd51) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x100, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) [ 878.441529][T24445] binder: 24442:24445 ioctl c0306201 0 returned -14 13:04:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da0b}}, 0x14}}, 0x0) 13:04:36 executing program 1: [ 878.520491][T24445] binder: 24442:24445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da0c}}, 0x14}}, 0x0) 13:04:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:36 executing program 1: 13:04:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da0e}}, 0x14}}, 0x0) [ 878.694316][T24472] binder: 24471:24472 ioctl c0306201 0 returned -14 [ 878.734971][T24472] binder: 24471:24472 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:39 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:39 executing program 1: 13:04:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da0f}}, 0x14}}, 0x0) 13:04:39 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x20004004) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:39 executing program 1: 13:04:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da10}}, 0x14}}, 0x0) 13:04:39 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 881.560872][T24500] binder: 24497:24500 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:39 executing program 1: 13:04:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x2}}, 0x14}}, 0x0) 13:04:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:39 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 13:04:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x3}}, 0x14}}, 0x0) [ 881.782637][T24523] binder: 24520:24523 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 881.933721][T24534] binder: 24533:24534 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x5, 0x8200000000000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) socketpair$unix(0x1, 0x8384e3c98e5126f8, 0x0, &(0x7f00000001c0)) 13:04:40 executing program 1: 13:04:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x4}}, 0x14}}, 0x0) 13:04:42 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d0100"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:42 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:42 executing program 1: 13:04:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x8}}, 0x14}}, 0x0) 13:04:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x80005, 0x1ff) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x7f, 0xffffffffffffff8c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$inet(0x2, 0x10006, 0xffffffff00000001) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:42 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) 13:04:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xa}}, 0x14}}, 0x0) [ 884.731569][T24574] binder: 24573:24574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:42 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) 13:04:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xe}}, 0x14}}, 0x0) [ 884.876433][T24589] binder: 24588:24589 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 884.993695][T24599] binder: 24598:24599 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf}}, 0x14}}, 0x0) 13:04:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:45 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d0100"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffc4, 0x0, &(0x7f0000e68000)={0x2, 0x4e26, @remote}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000300)=""/175) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="000026bd7000ffdb1f0012000000100001000c0002000800020000623c00640005000800010065746800080001007564700008000100756470002c0002007bb913424885cf29f790ad7de2080002000100000008000400400000000800010018000000080004000800000008000100200000001c00020008000100010000000800030003000000080001001a000000380006000800010056a5000004000200080001000008000008000100332b00000800010000000000040002000800f1ff0004000004000200a00001003400020008000300ff03000008000100170000000800030000000000080002001d90000008000400b43b00000800030002000000180001006574683a030000005f736c6176655f31000000002c000200080002003f0000000800030075000000080003000104000008000300d75c000008000400e0ffffff2400020008000008000200ffff00000800020000010000200007000c000300a50d000000000000080001008400000008000100c6090000b00004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a30000000001c0007000800020003000000080004000000000008000200000000000c00010073797a31000000001c000700080002000400006cc06e2a4b270f3c0008000400976600003c000700080002000500000008000200000000000800010011000000080001000a0000000800010016000000080002000500000008000200010000006400019e7ebc34d1bfb37acce1b675341b000c00020008000300ffffff7f0800030083430000440002000800030900002000000800020000800000080004000100000008000200ffffffff080002000300000008000100030000000800040003000000080004007fff000008000300030000002400050008000100657468000800010069620000080001007564700008000100756470000401040014000700080002003e03000008000100190000000c00010073797a30000000001400010062726f6164636173742d6c696e6b00003400070008000400070000000800010000000000080003ffffffff080002000700000008000200800000000c000700e6ff00000a0000000c00070008000400161e4e040000797a31000000005400070008000400090000000800040002000000080004000100008008000400ffff000008000400fcffffff08000200090000000800030097ca000008000300000000000800010009000000080004000600000014f10600080002000000000000000000001b376c78d284bd4cb3d8b5e271947d806d3be20ed4a3e19717e0c1e32458d4dd3681016e62c31fbd968523d62c4c2687aa1583101ec4f1fad803b0d0830f5cf098a63b18c343213dcfe374fbfa25a7330bba533c6e2195f1f9116e9ac2c1f47b07d3ec0da50de85a279d108d552c7e64edf8155567c0b9746f33d4ecafdf47f2cd0bd2072892e439099f6b4f582c6d6e1c236b309ab5fd52bdecd0dd6bfec5f4bd5ac4a2a931cc56276894de6bf4b8e243225ad21c1dc9cf3312de9f64e48b55958ae72fa9da68d4d9ad54cc821747420e54fc39508b410d7563e6fe78e79b8a99b28cc2e1dc8063fa45234d54c050d4f2ad61ddd1faf3397326b694abfc0696419b9333ac5fb3d45726"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x10}}, 0x14}}, 0x0) [ 887.770652][T24616] binder: 24615:24616 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x60}}, 0x14}}, 0x0) 13:04:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) [ 887.944256][T24637] binder: 24636:24637 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf0}}, 0x14}}, 0x0) 13:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x1a0}}, 0x14}}, 0x0) [ 888.083755][T24648] binder: 24646:24648 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:48 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d0100"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:48 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x300}}, 0x14}}, 0x0) 13:04:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') write$P9_RLERROR(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000f2"], 0x14) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff65) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) [ 890.848898][T24672] binder: 24668:24672 unknown command 25349 [ 890.855626][T24672] binder: 24668:24672 ioctl c0306201 20012000 returned -22 [ 890.864360][T24672] binder: 24668:24672 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) close(r0) 13:04:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x62f}}, 0x14}}, 0x0) 13:04:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xa00}}, 0x14}}, 0x0) [ 891.015991][T24688] binder: 24685:24688 unknown command 25349 [ 891.046822][T24688] binder: 24685:24688 ioctl c0306201 20012000 returned -22 13:04:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) close(r0) [ 891.081855][T24688] binder: 24685:24688 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xe00}}, 0x14}}, 0x0) 13:04:51 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:51 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) close(r0) 13:04:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xec0}}, 0x14}}, 0x0) 13:04:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e24, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:51 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf00}}, 0x14}}, 0x0) 13:04:51 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 893.964656][T24728] binder: 24715:24728 unknown command 25349 [ 893.986427][T24728] binder: 24715:24728 ioctl c0306201 20012000 returned -22 [ 893.995406][T24728] binder: 24715:24728 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x2f06}}, 0x14}}, 0x0) [ 894.129399][T24746] binder: 24745:24746 unknown command 287493 [ 894.155087][T24746] binder: 24745:24746 ioctl c0306201 20012000 returned -22 13:04:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x6000}}, 0x14}}, 0x0) [ 894.173112][T24746] binder: 24745:24746 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:54 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xc00e}}, 0x14}}, 0x0) 13:04:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x200001, 0x40000) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) [ 897.018570][T24766] binder: 24765:24766 unknown command 287493 [ 897.039740][T24766] binder: 24765:24766 ioctl c0306201 20012000 returned -22 13:04:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf000}}, 0x14}}, 0x0) 13:04:54 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e06"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 897.069415][T24766] binder: 24765:24766 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:55 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(0xffffffffffffffff) 13:04:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x34000}}, 0x14}}, 0x0) [ 897.245318][T24792] binder: 24791:24792 unknown command 287493 [ 897.271111][T24792] binder: 24791:24792 ioctl c0306201 20012000 returned -22 [ 897.294748][T24792] binder: 24791:24792 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 13:04:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x400300}}, 0x14}}, 0x0) 13:04:57 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:04:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) dup2(r0, r0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:04:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf0ffff}}, 0x14}}, 0x0) 13:04:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:58 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e06"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:04:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x1000000}}, 0x14}}, 0x0) 13:04:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:04:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x2000000}}, 0x14}}, 0x0) 13:04:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:04:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x3000000}}, 0x14}}, 0x0) 13:05:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 13:05:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x4000000}}, 0x14}}, 0x0) 13:05:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfd8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008005) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:05:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e06"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 13:05:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x8000000}}, 0x14}}, 0x0) 13:05:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xa000000}}, 0x14}}, 0x0) 13:05:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) [ 903.320377][T24885] binder: 24884:24885 ioctl c0306201 0 returned -14 13:05:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:05:04 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:04 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xe000000}}, 0x14}}, 0x0) 13:05:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:05:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:05:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:05:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf000000}}, 0x14}}, 0x0) 13:05:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x10000000}}, 0x14}}, 0x0) 13:05:04 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:05:07 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x2f060000}}, 0x14}}, 0x0) 13:05:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:05:07 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0xfffffd9a) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getdents64(r5, &(0x7f0000000300)=""/247, 0x117) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:05:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x60000000}}, 0x14}}, 0x0) 13:05:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) 13:05:07 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x9effffff}}, 0x14}}, 0x0) 13:05:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") socket$key(0xf, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000aa0000003d8954ffb6e1a9c6cb48d1eb1c276e090000000000000063c6b6b8a81173a48d6bba51145f07f2a8e1a47349000000008bf528215e4b50d5c48751c9060dc26be3cc5f0f220b54339c32cba0433a9a10ab48658ce6d3528db2acd1c77b4091c89d6f576e001d4e9484daaa7adef8a8ca51355aec3ff0dac336e5ece31d7a2d3a0e51673d2a3ee926a7"], 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1, 0x0) r3 = getpid() write$FUSE_LK(r2, &(0x7f00000000c0)={0x28, 0x0, 0x4, {{0x6, 0x0, 0x0, r3}}}, 0x28) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff0000080006040002080008000000ac14412d52ddf137736fa5264b3cc2c8"], 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) clone(0x8000002102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) bind(r1, &(0x7f0000000300)=@hci={0x1f, r4, 0x3}, 0x80) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000ebbd0fdf733f260005001a000500004000050000014000095f52ff6bdfdf81a7d64be400000100000000000000000000d85dba720d79e23af70b6320daddafb884af5fdf85a607af83f82a6f6969d160240dd3"], 0x5b}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r8) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r7]}], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) 13:05:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:10 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xa0010000}}, 0x14}}, 0x0) 13:05:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x500, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff8) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'ovf\x00', 0x5, 0x0, 0x4d}, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r4, &(0x7f00000ddff8)=0x7, 0x102002700) getuid() ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 13:05:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) sendmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000400)="6a2512390c4ed2ee39dac39bb81bb1d3ba846be8f49ff3b159a94fd1e0c09d558cca2d3a4a4c372e817e64f9f9e12b6c68c5ad7fcaaaa7256f4a75ee7de3805ccc5186250efca03b93f74fca134cbd86dc7707", 0x53}, {&(0x7f0000000480)="0107a3c21673536fb5ae37e5d80d76af19fa9daa5d10a2c4c5f724c8c63a4bd824262c24d7efc8318a506daf2cb7c64d85608594beb906e9075ca40b65e33b99a2a1d222e53ed1b258736fb571784c96bce45ce470063eaeb390f8f5b8b052918d2e25d1993edd006cfe2b92b514081ca04d1c64a7109445ccbee5845e65cf2f3fc16c513a49f147f096bf67708b325edacbe42ab97d962a7537351ad9d12acf12aca47486468890fec2e9a9640c84690402f5262370c0ab842ea0602a4f4cce551a4492b4504e0c07f312b1905e1506bfeccca49647a5756f8c503e62bc84b858cbe91a5d513b", 0xe7}, {&(0x7f0000000580)="8fe59b0dd02f0965961642fa098decd0b5142dff02d56d19102f4239a25cf8a235d7e62a9730df0e84ca2abaf8e71cf3c0374943aa6526ab4e468fe6070472c3878aabc0cc0d2e8c6667b56ed40a3fd93be8407c96f826698ed48fc336c718b1ce62e93c2c076fd306627d164a884c3eafc6460418e948fa344eb3c22d8cfe43ec04f9a3e77e", 0x86}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x40) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:05:10 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xc00e0000}}, 0x14}}, 0x0) 13:05:10 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf0ffffff}}, 0x14}}, 0x0) 13:05:13 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:13 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xfffff000}}, 0x14}}, 0x0) 13:05:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x5, 0x8200000000000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) socketpair$unix(0x1, 0x8384e3c98e5126f8, 0x0, &(0x7f00000001c0)) 13:05:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x5, 0x8200000000000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) socketpair$unix(0x1, 0x8384e3c98e5126f8, 0x0, &(0x7f00000001c0)) 13:05:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x5, 0x8200000000000) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r0, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) socketpair$unix(0x1, 0x8384e3c98e5126f8, 0x0, &(0x7f00000001c0)) 13:05:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xffffff7f}}, 0x14}}, 0x0) 13:05:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 13:05:13 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, 0x0, 0x0) close(r0) 13:05:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xffffff9e}}, 0x14}}, 0x0) 13:05:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:16 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xfffffff0}}, 0x14}}, 0x0) 13:05:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, 0x0, 0x0) close(r0) 13:05:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, 0x0, 0x0) close(r0) 13:05:16 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x1a0ffffffff}}, 0x14}}, 0x0) 13:05:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x40030000000000}}, 0x14}}, 0x0) 13:05:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(0xffffffffffffffff) 13:05:16 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:19 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:19 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf0ffffffffffff}}, 0x14}}, 0x0) 13:05:19 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:19 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x7e0}], 0x1, &(0x7f0000001680)=""/72, 0x3e}}], 0x1, 0x0, &(0x7f0000002240)) sendmsg$alg(r1, 0x0, 0x4) 13:05:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x100000000000000}}, 0x14}}, 0x0) 13:05:19 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x200000000000000}}, 0x14}}, 0x0) 13:05:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x300000000000000}}, 0x14}}, 0x0) 13:05:19 executing program 0: open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 13:05:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x400000000000000}}, 0x14}}, 0x0) [ 921.823413][T25176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:05:20 executing program 1: socketpair$unix(0x1, 0x100040000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 13:05:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x800000000000000}}, 0x14}}, 0x0) 13:05:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xa00000000000000}}, 0x14}}, 0x0) 13:05:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xe00000000000000}}, 0x14}}, 0x0) 13:05:22 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf00000000000000}}, 0x14}}, 0x0) 13:05:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:22 executing program 1: socketpair$unix(0x1, 0x100040000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 13:05:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x1000000000000000}}, 0x14}}, 0x0) 13:05:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x2f06000000000000}}, 0x14}}, 0x0) 13:05:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x6000000000000000}}, 0x14}}, 0x0) 13:05:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x9effffff00000000}}, 0x14}}, 0x0) 13:05:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xc00e000000000000}}, 0x14}}, 0x0) 13:05:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xf0ffffff00000000}}, 0x14}}, 0x0) 13:05:25 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xffffff7f00000000}}, 0x14}}, 0x0) 13:05:25 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 13:05:25 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:25 executing program 1: socketpair$unix(0x1, 0x100040000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 13:05:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xffffffffa0010000}}, 0x14}}, 0x0) 13:05:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/igmp\x00\x00\x00?\xefI\x03\xa0\xb5V\xcfF\xbd\xe2\xcc\xca\x944\x17m,\x00\x04\x00\x00\x00\x00\x00\x00\x90!{\x95\x10\v.\xa7\xb0v\xba\xdfv\x06\x05\xef\x87\x83G\v\xe4F\xd5\x02\x00\x00\x00\x00\x00\x00\x00G\xf7j\xe4L>\n.8\x0e\x068(9\xddu\xcd^\x05\xf7C\xbdyR%\x88\xd9\x06\xac\x03-vgV%\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1) 13:05:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0xfffffffffffff000}}, 0x14}}, 0x0) 13:05:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 13:05:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x2}}, 0x14}}, 0x0) 13:05:25 executing program 4: 13:05:28 executing program 4: 13:05:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x3}}, 0x14}}, 0x0) 13:05:28 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:28 executing program 1: 13:05:28 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:28 executing program 4: 13:05:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xd, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000000463044004"], 0x0, 0x0, 0x0}) 13:05:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x4}}, 0x14}}, 0x0) 13:05:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x8}}, 0x14}}, 0x0) [ 930.972862][T25311] binder: 25304:25311 IncRefs 0 refcount change on invalid ref 4 ret -22 13:05:28 executing program 4: clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x5) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 13:05:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 13:05:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xa}}, 0x14}}, 0x0) 13:05:29 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29f, 0xfffffffffffffffb) 13:05:31 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xe}}, 0x14}}, 0x0) 13:05:31 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x12}) 13:05:31 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29f, 0xfffffffffffffffb) 13:05:31 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x0) 13:05:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf}}, 0x14}}, 0x0) 13:05:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:05:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x10}}, 0x14}}, 0x0) 13:05:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x60}}, 0x14}}, 0x0) 13:05:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf0}}, 0x14}}, 0x0) 13:05:34 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x1a0}}, 0x14}}, 0x0) 13:05:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:34 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29f, 0xfffffffffffffffb) 13:05:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x300}}, 0x14}}, 0x0) 13:05:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x62f}}, 0x14}}, 0x0) 13:05:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xa00}}, 0x14}}, 0x0) 13:05:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xe00}}, 0x14}}, 0x0) 13:05:37 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xec0}}, 0x14}}, 0x0) 13:05:37 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29f, 0xfffffffffffffffb) 13:05:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf00}}, 0x14}}, 0x0) 13:05:38 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x2f06}}, 0x14}}, 0x0) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x6000}}, 0x14}}, 0x0) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xc00e}}, 0x14}}, 0x0) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf000}}, 0x14}}, 0x0) 13:05:38 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:38 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x12}) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x34000}}, 0x14}}, 0x0) 13:05:38 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:05:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x400300}}, 0x14}}, 0x0) 13:05:38 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x12}) 13:05:41 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:41 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x12}) 13:05:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf0ffff}}, 0x14}}, 0x0) 13:05:41 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) 13:05:41 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:41 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:05:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x1000000}}, 0x14}}, 0x0) 13:05:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:41 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:05:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x2000000}}, 0x14}}, 0x0) 13:05:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:44 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x3000000}}, 0x14}}, 0x0) 13:05:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:44 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:05:44 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) 13:05:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x4000000}}, 0x14}}, 0x0) 13:05:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:44 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 13:05:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x8000000}}, 0x14}}, 0x0) 13:05:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xa000000}}, 0x14}}, 0x0) 13:05:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:47 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:47 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 13:05:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xe000000}}, 0x14}}, 0x0) 13:05:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf000000}}, 0x14}}, 0x0) 13:05:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 13:05:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x10000000}}, 0x14}}, 0x0) 13:05:48 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:05:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x2f060000}}, 0x14}}, 0x0) 13:05:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x60000000}}, 0x14}}, 0x0) 13:05:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:50 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x8001000000002c) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000002c0)={0x0, 0x5, 0x800, 0x400, 0x9, 0xde1a, 0x100000000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:05:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x9effffff}}, 0x14}}, 0x0) 13:05:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) 13:05:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:50 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xa0010000}}, 0x14}}, 0x0) 13:05:50 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xc00e0000}}, 0x14}}, 0x0) 13:05:51 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf0ffffff}}, 0x14}}, 0x0) 13:05:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xfffff000}}, 0x14}}, 0x0) 13:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:53 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCCBRK(r3, 0x5428) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xffffff7f}}, 0x14}}, 0x0) 13:05:53 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:53 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xffffff9e}}, 0x14}}, 0x0) 13:05:54 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xfffffff0}}, 0x14}}, 0x0) 13:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) 13:05:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x40030000000000}}, 0x14}}, 0x0) 13:05:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf0ffffffffffff}}, 0x14}}, 0x0) 13:05:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x100000000000000}}, 0x14}}, 0x0) 13:05:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x200000000000000}}, 0x14}}, 0x0) 13:05:57 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x300000000000000}}, 0x14}}, 0x0) 13:05:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x400000000000000}}, 0x14}}, 0x0) 13:05:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x800000000000000}}, 0x14}}, 0x0) 13:05:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:05:59 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:05:59 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xa00000000000000}}, 0x14}}, 0x0) 13:06:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xe00000000000000}}, 0x14}}, 0x0) 13:06:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf00000000000000}}, 0x14}}, 0x0) 13:06:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:02 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:06:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x1000000000000000}}, 0x14}}, 0x0) 13:06:02 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:03 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x2f06000000000000}}, 0x14}}, 0x0) 13:06:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x6000000000000000}}, 0x14}}, 0x0) 13:06:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0x9effffff00000000}}, 0x14}}, 0x0) 13:06:03 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:06:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xc00e000000000000}}, 0x14}}, 0x0) 13:06:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xf0ffffff00000000}}, 0x14}}, 0x0) 13:06:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xffffff7f00000000}}, 0x14}}, 0x0) 13:06:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xffffffffa0010000}}, 0x14}}, 0x0) 13:06:06 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003bc0)=0x200000072, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003c80)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xffffff24) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003cc0)={0xff, {{0x2, 0x4e23, @loopback}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x8200000000001) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r2) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000000000000600000000000000010000000500000008000000000000000400000000000000ff00000000000000040000000000000000000000000000000000000000000000000600000000000000000000000300000000000000ff000000000000004608000000000000000000000000000000000000000000000400000000000000000000000000000081000000000000000900000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000104000000000000dd00000000000000010000000000000000000000000000000000000000000000002000000000000000000000000000000100000000000000010000000100000009000000000000000000000000000000000000000000000001000000000000000000000000000000e14a0000000000000100000000000000fffffeffffffffff000000000000000000000000000000000000000000000000000000000000f6ff0300000000000000ff03000000000000ee00000000000000000000000000000000000000000000000008000000000000000000000000000001000000000000003f0000000000000006000000000000000000000000000000000000000000000080000000000000000000000000000000"]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000003fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003f80)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffffffffffff65) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r3, 0x0, 0x80005) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0xf}}, 0x0) 13:06:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0xc0}}, 0x0) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0xec0}}, 0x0) 13:06:09 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:09 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:09 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 13:06:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x33fe0}}, 0x0) 13:06:09 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x20000094}}, 0x0) 13:06:09 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x7ffff000}}, 0x0) 13:06:09 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) msgget(0x1, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0xfffffdef}}, 0x0) 13:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x2}, 0x0) 13:06:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x8}, 0x0) 13:06:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x12}) 13:06:12 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x11}, 0x0) 13:06:12 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x67}, 0x0) 13:06:12 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:06:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x300}, 0x0) 13:06:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0xffffff1f}, 0x0) 13:06:13 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:06:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x2}, 0x0) 13:06:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:15 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x3}, 0x8}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 13:06:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x3}, 0x0) 13:06:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x4}, 0x0) 13:06:15 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x8}, 0x0) 13:06:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xa}, 0x0) 13:06:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xe}, 0x0) 13:06:16 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0c03c181b50020000000000004a419ec14a33854f29971393a90746989e948981c13ca16e93be58418472a875fe76b0d01000080008b8e062c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 13:06:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf}, 0x0) 13:06:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:18 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520d0d6c, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 13:06:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x10}, 0x0) 13:06:18 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x60}, 0x0) 13:06:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf0}, 0x0) 13:06:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x1a0}, 0x0) 13:06:19 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1800000000000000}}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) socketpair(0x1, 0x80003, 0x1, &(0x7f0000000480)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 13:06:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x300}, 0x0) [ 981.412855][ T26] audit: type=1804 audit(1547557579.268:55): pid=26005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir648954495/syzkaller.NihkDo/229/bus" dev="sda1" ino=17167 res=1 13:06:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x62f}, 0x0) 13:06:19 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520d620d, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 981.496336][ T26] audit: type=1800 audit(1547557579.278:56): pid=26005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=17167 res=0 [ 981.745137][ T26] audit: type=1804 audit(1547557579.608:57): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir648954495/syzkaller.NihkDo/229/bus" dev="sda1" ino=17167 res=1 [ 981.868883][ T26] audit: type=1804 audit(1547557579.698:58): pid=26005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir648954495/syzkaller.NihkDo/229/bus" dev="sda1" ino=17167 res=1 [ 981.905610][ T26] audit: type=1804 audit(1547557579.698:59): pid=26005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir648954495/syzkaller.NihkDo/229/bus" dev="sda1" ino=17167 res=1 [ 981.932031][ T26] audit: type=1800 audit(1547557579.698:60): pid=26005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=17167 res=0 [ 981.952310][ T26] audit: type=1804 audit(1547557579.798:61): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir648954495/syzkaller.NihkDo/229/bus" dev="sda1" ino=17167 res=1 13:06:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:21 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xa00}, 0x0) 13:06:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 13:06:21 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520d7d01, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 983.820465][T26030] encrypted_key: keyword 'update' not allowed when called from .instantiate method 13:06:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xe00}, 0x0) 13:06:21 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xec0}, 0x0) [ 984.047571][T26043] encrypted_key: keyword 'update' not allowed when called from .instantiate method 13:06:22 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf00}, 0x0) [ 984.286933][T26050] encrypted_key: keyword 'update' not allowed when called from .instantiate method 13:06:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x2f06}, 0x0) 13:06:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:24 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x6000}, 0x0) 13:06:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520d906a, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 986.908452][T26070] encrypted_key: keyword 'update' not allowed when called from .instantiate method 13:06:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xc00e}, 0x0) 13:06:24 executing program 5: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 987.168895][T26082] encrypted_key: insufficient parameters specified 13:06:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf000}, 0x0) 13:06:25 executing program 5: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x34000}, 0x0) [ 987.399950][T26088] encrypted_key: insufficient parameters specified 13:06:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x400300}, 0x0) 13:06:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:27 executing program 5: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf0ffff}, 0x0) 13:06:27 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x500, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e20, @dev}], 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x18, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffff8) keyctl$chown(0x4, r3, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f61640564656661756c7420757365723a7b"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) memfd_create(&(0x7f0000000140)='^\x00', 0x0) 13:06:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520dbb5e, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x1000000}, 0x0) [ 990.123957][T26110] encrypted_key: insufficient parameters specified 13:06:28 executing program 5: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x2000000}, 0x0) [ 990.311397][T26109] encrypted_key: keylen parameter is missing 13:06:28 executing program 5: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 990.380881][T26123] encrypted_key: insufficient parameters specified [ 990.402395][T26114] encrypted_key: keylen parameter is missing 13:06:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x3000000}, 0x0) 13:06:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000002bc0)=@sco, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003f00)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004280)=""/98, 0x62}, {&(0x7f0000004300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005380)=""/65, 0x41}], 0x8}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) [ 990.478901][T26130] encrypted_key: insufficient parameters specified 13:06:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x4000000}, 0x0) 13:06:31 executing program 5: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:31 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 13:06:31 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa02, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:31 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) [ 993.191228][T26154] encrypted_key: insufficient parameters specified 13:06:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:06:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x8000000}, 0x0) 13:06:31 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xa000000}, 0x0) 13:06:31 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) shutdown(r0, 0x1) 13:06:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xe000000}, 0x0) 13:06:34 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(0x0, &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:34 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa04, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:34 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:34 executing program 0: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8402, 0x0) 13:06:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf000000}, 0x0) 13:06:34 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x10000000}, 0x0) 13:06:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x400000000007, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 13:06:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x2f060000}, 0x0) 13:06:37 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:37 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:37 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pause() getgroups(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x2007ff) 13:06:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa05, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x60000000}, 0x0) 13:06:37 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 13:06:37 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:37 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) 13:06:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x9effffff}, 0x0) 13:06:37 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xa0010000}, 0x0) 13:06:37 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) 13:06:37 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) 13:06:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xc00e0000}, 0x0) 13:06:40 executing program 5: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1fffffff0007fffc) 13:06:40 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000440)=""/148, &(0x7f0000000200)=0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) 13:06:40 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa06, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:40 executing program 5: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1fffffff0007fffc) 13:06:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) [ 1002.413022][T26335] EXT4-fs warning (device sda1): ext4_group_extend:1791: can't read last block, resize aborted 13:06:40 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa05, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xfffff000}, 0x0) [ 1002.561442][T26348] EXT4-fs warning (device sda1): ext4_group_extend:1791: can't read last block, resize aborted 13:06:40 executing program 5: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1fffffff0007fffc) 13:06:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xffffff7f}, 0x0) [ 1002.742363][T26355] EXT4-fs warning (device sda1): ext4_group_extend:1791: can't read last block, resize aborted 13:06:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:43 executing program 5: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1fffffff0007fffc) 13:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xffffff9e}, 0x0) 13:06:43 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:43 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520dbb5e, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:43 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x2, &(0x7f0000000300)}}, 0xfffffea9) 13:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xfffffff0}, 0x0) [ 1005.496553][T26376] EXT4-fs warning (device sda1): ext4_group_extend:1791: can't read last block, resize aborted 13:06:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 13:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x1a0ffffffff}, 0x0) 13:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 13:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 13:06:43 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 13:06:46 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520dbb5e, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x4, &(0x7f0000000300)}}, 0xfffffea9) 13:06:46 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 13:06:46 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5412c0, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 13:06:46 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = syz_open_dev$admmidi(0x0, 0x6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x400000000000000}, 0x0) 13:06:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:49 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0xffffffff, 0xffffffff, @mac=@random="ca635e6e87a7", {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8001, 0x80000001, 0x7, 0x9, 0x80, 0x380c, 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x800000000000000}, 0x0) 13:06:49 executing program 0 (fault-call:1 fault-nth:0): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:49 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x5, &(0x7f0000000300)}}, 0xfffffea9) [ 1011.570559][T26456] FAULT_INJECTION: forcing a failure. [ 1011.570559][T26456] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.591571][T26456] CPU: 1 PID: 26456 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190115 #12 [ 1011.600600][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.610660][T26456] Call Trace: [ 1011.613951][T26456] dump_stack+0x1db/0x2d0 [ 1011.618283][T26456] ? dump_stack_print_info.cold+0x20/0x20 [ 1011.624000][T26456] ? find_held_lock+0x35/0x120 [ 1011.628775][T26456] should_fail.cold+0xa/0x14 [ 1011.633371][T26456] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1011.639200][T26456] ? ___might_sleep+0x1e7/0x310 [ 1011.644062][T26456] ? arch_local_save_flags+0x50/0x50 [ 1011.649447][T26456] ? __mutex_unlock_slowpath+0x195/0x870 [ 1011.655088][T26456] __should_failslab+0x121/0x190 [ 1011.660029][T26456] should_failslab+0x9/0x14 [ 1011.664532][T26456] __kmalloc_track_caller+0x2d8/0x740 13:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) [ 1011.669902][T26456] ? strncpy_from_user+0x4e0/0x4e0 [ 1011.675013][T26456] ? digsig_verify.cold+0x32/0x32 [ 1011.680034][T26456] ? strndup_user+0x77/0xd0 [ 1011.684534][T26456] memdup_user+0x26/0xb0 [ 1011.688776][T26456] strndup_user+0x77/0xd0 [ 1011.693119][T26456] __x64_sys_add_key+0x19d/0x4f0 [ 1011.698059][T26456] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1011.704684][T26456] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.710749][T26456] ? trace_hardirqs_off_caller+0x300/0x300 [ 1011.716551][T26456] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1011.722143][T26456] do_syscall_64+0x1a3/0x800 [ 1011.726733][T26456] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1011.732396][T26456] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1011.738127][T26456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1011.744813][T26456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.750723][T26456] RIP: 0033:0x457ec9 [ 1011.754615][T26456] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.774211][T26456] RSP: 002b:00007f30df0d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1011.782630][T26456] RAX: ffffffffffffffda RBX: 00007f30df0d6c90 RCX: 0000000000457ec9 [ 1011.790610][T26456] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 1011.798572][T26456] RBP: 000000000073bf00 R08: fffffffffffffffe R09: 0000000000000000 [ 1011.806538][T26456] R10: 00000000000000ca R11: 0000000000000246 R12: 00007f30df0d76d4 [ 1011.814504][T26456] R13: 00000000004bde11 R14: 00000000004ce028 R15: 0000000000000003 13:06:49 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 13:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 13:06:49 executing program 0 (fault-call:1 fault-nth:1): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:50 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) [ 1012.126316][T26476] FAULT_INJECTION: forcing a failure. [ 1012.126316][T26476] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.165120][T26476] CPU: 0 PID: 26476 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190115 #12 [ 1012.174148][T26476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.184199][T26476] Call Trace: [ 1012.187495][T26476] dump_stack+0x1db/0x2d0 [ 1012.191839][T26476] ? dump_stack_print_info.cold+0x20/0x20 [ 1012.197555][T26476] ? add_lock_to_list.isra.0+0x450/0x450 [ 1012.203191][T26476] should_fail.cold+0xa/0x14 [ 1012.207781][T26476] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1012.213591][T26476] ? ___might_sleep+0x1e7/0x310 [ 1012.218444][T26476] ? arch_local_save_flags+0x50/0x50 [ 1012.223732][T26476] ? lock_release+0xc40/0xc40 [ 1012.228416][T26476] __should_failslab+0x121/0x190 [ 1012.233381][T26476] should_failslab+0x9/0x14 [ 1012.237877][T26476] kmem_cache_alloc_node_trace+0x270/0x720 [ 1012.243697][T26476] __kmalloc_node+0x3d/0x70 [ 1012.248200][T26476] kvmalloc_node+0x68/0x100 [ 1012.252716][T26476] __x64_sys_add_key+0x3cd/0x4f0 [ 1012.257660][T26476] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1012.264246][T26476] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.270313][T26476] ? trace_hardirqs_off_caller+0x300/0x300 [ 1012.276113][T26476] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1012.281576][T26476] do_syscall_64+0x1a3/0x800 [ 1012.286163][T26476] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1012.291788][T26476] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1012.297511][T26476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1012.303078][T26476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.308963][T26476] RIP: 0033:0x457ec9 [ 1012.312850][T26476] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.332442][T26476] RSP: 002b:00007f30df0d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1012.340932][T26476] RAX: ffffffffffffffda RBX: 00007f30df0d6c90 RCX: 0000000000457ec9 [ 1012.348898][T26476] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 1012.356874][T26476] RBP: 000000000073bf00 R08: fffffffffffffffe R09: 0000000000000000 [ 1012.364838][T26476] R10: 00000000000000ca R11: 0000000000000246 R12: 00007f30df0d76d4 [ 1012.372815][T26476] R13: 00000000004bde11 R14: 00000000004ce028 R15: 0000000000000003 13:06:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 13:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x1000000000000000}, 0x0) 13:06:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12}) 13:06:52 executing program 0 (fault-call:1 fault-nth:2): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:52 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) 13:06:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0xe135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x6, &(0x7f0000000300)}}, 0xfffffea9) 13:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x2f06000000000000}, 0x0) [ 1014.663104][T26497] FAULT_INJECTION: forcing a failure. [ 1014.663104][T26497] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.720604][T26497] CPU: 1 PID: 26497 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190115 #12 [ 1014.729749][T26497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.739812][T26497] Call Trace: [ 1014.743117][T26497] dump_stack+0x1db/0x2d0 [ 1014.747461][T26497] ? dump_stack_print_info.cold+0x20/0x20 [ 1014.753195][T26497] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1014.759173][T26497] ? rcu_read_unlock_special+0x380/0x380 [ 1014.764817][T26497] should_fail.cold+0xa/0x14 [ 1014.769414][T26497] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1014.775225][T26497] ? ___might_sleep+0x1e7/0x310 [ 1014.780069][T26497] ? arch_local_save_flags+0x50/0x50 [ 1014.785367][T26497] __should_failslab+0x121/0x190 [ 1014.790310][T26497] should_failslab+0x9/0x14 [ 1014.794822][T26497] kmem_cache_alloc+0x2be/0x710 [ 1014.799676][T26497] ? debug_smp_processor_id+0x1c/0x20 [ 1014.805046][T26497] ? perf_trace_lock_acquire+0x138/0x7d0 [ 1014.810697][T26497] ? kvmalloc_node+0x68/0x100 [ 1014.815390][T26497] ? __x64_sys_add_key+0x3cd/0x4f0 [ 1014.820528][T26497] ? do_syscall_64+0x1a3/0x800 [ 1014.825399][T26497] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.831466][T26497] prepare_creds+0xa4/0x510 [ 1014.835964][T26497] ? perf_trace_lock+0x750/0x750 [ 1014.840905][T26497] ? abort_creds+0x2c0/0x2c0 [ 1014.845507][T26497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.851742][T26497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.857979][T26497] ? __might_fault+0x12b/0x1e0 [ 1014.862832][T26497] lookup_user_key+0x762/0x14f0 [ 1014.867697][T26497] ? join_session_keyring+0x340/0x340 [ 1014.873084][T26497] ? key_validate+0x240/0x240 [ 1014.877775][T26497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1014.884103][T26497] ? _copy_from_user+0xdd/0x150 [ 1014.888948][T26497] __x64_sys_add_key+0x272/0x4f0 [ 1014.893906][T26497] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1014.900508][T26497] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.906593][T26497] ? trace_hardirqs_off_caller+0x300/0x300 [ 1014.912397][T26497] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1014.917871][T26497] do_syscall_64+0x1a3/0x800 [ 1014.922480][T26497] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1014.928126][T26497] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1014.933845][T26497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1014.939401][T26497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.945282][T26497] RIP: 0033:0x457ec9 [ 1014.949171][T26497] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x6000000000000000}, 0x0) [ 1014.968766][T26497] RSP: 002b:00007f30df0d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1014.977283][T26497] RAX: ffffffffffffffda RBX: 00007f30df0d6c90 RCX: 0000000000457ec9 [ 1014.985332][T26497] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 1014.993311][T26497] RBP: 000000000073bf00 R08: fffffffffffffffe R09: 0000000000000000 [ 1015.001273][T26497] R10: 00000000000000ca R11: 0000000000000246 R12: 00007f30df0d76d4 [ 1015.009230][T26497] R13: 00000000004bde11 R14: 00000000004ce028 R15: 0000000000000003 13:06:52 executing program 0 (fault-call:1 fault-nth:3): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 13:06:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) [ 1015.168741][T26512] FAULT_INJECTION: forcing a failure. [ 1015.168741][T26512] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.215733][T26512] CPU: 0 PID: 26512 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190115 #12 [ 1015.224794][T26512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.234842][T26512] Call Trace: [ 1015.238151][T26512] dump_stack+0x1db/0x2d0 [ 1015.242604][T26512] ? dump_stack_print_info.cold+0x20/0x20 [ 1015.248333][T26512] ? lookup_user_key+0x762/0x14f0 [ 1015.253351][T26512] ? __x64_sys_add_key+0x272/0x4f0 [ 1015.258460][T26512] ? do_syscall_64+0x1a3/0x800 [ 1015.263235][T26512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.269771][T26512] should_fail.cold+0xa/0x14 [ 1015.274367][T26512] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1015.280179][T26512] ? ___might_sleep+0x1e7/0x310 [ 1015.285030][T26512] ? arch_local_save_flags+0x50/0x50 [ 1015.290347][T26512] ? check_preemption_disabled+0x48/0x290 [ 1015.296081][T26512] __should_failslab+0x121/0x190 [ 1015.301033][T26512] should_failslab+0x9/0x14 [ 1015.305537][T26512] __kmalloc+0x2dc/0x740 [ 1015.309781][T26512] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1015.315585][T26512] ? prepare_creds+0xa4/0x510 [ 1015.320257][T26512] ? prepare_creds+0xa4/0x510 [ 1015.324946][T26512] ? security_prepare_creds+0x123/0x190 [ 1015.330513][T26512] security_prepare_creds+0x123/0x190 [ 1015.335896][T26512] prepare_creds+0x3c4/0x510 [ 1015.340506][T26512] ? abort_creds+0x2c0/0x2c0 [ 1015.345099][T26512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.351347][T26512] ? __might_fault+0x12b/0x1e0 [ 1015.356118][T26512] lookup_user_key+0x762/0x14f0 [ 1015.360978][T26512] ? join_session_keyring+0x340/0x340 [ 1015.366369][T26512] ? key_validate+0x240/0x240 [ 1015.371064][T26512] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1015.377312][T26512] ? _copy_from_user+0xdd/0x150 [ 1015.382158][T26512] __x64_sys_add_key+0x272/0x4f0 [ 1015.387083][T26512] ? key_get_type_from_user.constprop.0+0x110/0x110 [ 1015.393666][T26512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.393682][T26512] ? trace_hardirqs_off_caller+0x300/0x300 [ 1015.393699][T26512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1015.393722][T26512] do_syscall_64+0x1a3/0x800 13:06:53 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$admmidi(0x0, 0x6, 0x4000181010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x400000000000000, 0x0, 'queue1\x00', 0xfffffffffffffffc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8000000, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000580)={0x1, 0x3ff, 0x80c9, 0x100000001}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100), 0x8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) [ 1015.415574][T26512] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1015.421215][T26512] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1015.426953][T26512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1015.432518][T26512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.438408][T26512] RIP: 0033:0x457ec9 [ 1015.442303][T26512] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.461902][T26512] RSP: 002b:00007f30df0d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1015.470321][T26512] RAX: ffffffffffffffda RBX: 00007f30df0d6c90 RCX: 0000000000457ec9 [ 1015.478288][T26512] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 1015.486338][T26512] RBP: 000000000073bf00 R08: fffffffffffffffe R09: 0000000000000000 [ 1015.486348][T26512] R10: 00000000000000ca R11: 0000000000000246 R12: 00007f30df0d76d4 [ 1015.486357][T26512] R13: 00000000004bde11 R14: 00000000004ce028 R15: 0000000000000003 [ 1015.619806][ C0] ------------[ cut here ]------------ [ 1015.625523][ C0] AppArmor WARN cred_label: ((!blob)): [ 1015.625763][ C0] WARNING: CPU: 0 PID: 26519 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0 [ 1015.641963][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1015.648559][ C0] CPU: 0 PID: 26519 Comm: syz-executor1 Not tainted 5.0.0-rc2-next-20190115 #12 [ 1015.653523][ T3866] kobject: 'loop3' (00000000d6204f6d): kobject_uevent_env [ 1015.657562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.657573][ C0] Call Trace: [ 1015.674714][ T3866] kobject: 'loop3' (00000000d6204f6d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1015.677962][ C0] [ 1015.677982][ C0] dump_stack+0x1db/0x2d0 [ 1015.678003][ C0] ? dump_stack_print_info.cold+0x20/0x20 [ 1015.678029][ C0] ? apparmor_cred_free+0x30/0x1a0 [ 1015.678049][ C0] panic+0x2cb/0x65c [ 1015.710044][ C0] ? add_taint.cold+0x16/0x16 [ 1015.714723][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1015.719915][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.726147][ C0] ? __probe_kernel_read+0x1f4/0x250 [ 1015.731424][ C0] ? __warn.cold+0x5/0x48 [ 1015.735748][ C0] ? __warn+0xe8/0x1d0 [ 1015.739815][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1015.745036][ C0] __warn.cold+0x20/0x48 [ 1015.749276][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1015.754468][ C0] report_bug+0x263/0x2b0 [ 1015.758813][ C0] do_error_trap+0x11b/0x200 [ 1015.763422][ C0] do_invalid_op+0x37/0x50 [ 1015.767843][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1015.773147][ C0] invalid_op+0x14/0x20 [ 1015.775955][ T3866] kobject: 'loop5' (000000001a3d6679): kobject_uevent_env [ 1015.777292][ C0] RIP: 0010:apparmor_cred_free+0x12f/0x1a0 [ 1015.777305][ C0] Code: 7c 88 48 c7 c7 40 d2 7c 88 e8 5d 69 f2 fd 0f 0b eb a9 e8 64 40 29 fe 48 c7 c6 00 e2 7c 88 48 c7 c7 40 d2 7c 88 e8 41 69 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00 [ 1015.777313][ C0] RSP: 0018:ffff8880ae6079f8 EFLAGS: 00010286 [ 1015.777324][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1015.777332][ C0] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006 [ 1015.777340][ C0] RBP: ffff8880ae607a18 R08: ffff888017c36600 R09: ffff888017c36ec8 [ 1015.777352][ C0] R10: ffff888017c36600 R11: 0000000000000000 R12: ffff888096f65b00 [ 1015.788267][ T3866] kobject: 'loop5' (000000001a3d6679): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1015.790222][ C0] R13: ffff888096f65b00 R14: ffff888096f65b88 R15: dffffc0000000000 [ 1015.790250][ C0] ? vprintk_func+0x86/0x189 [ 1015.790268][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 1015.790285][ C0] security_cred_free+0x4b/0xf0 [ 1015.790319][ C0] put_cred_rcu+0x21f/0x6e0 [ 1015.790354][ C0] ? get_task_cred+0x5e0/0x5e0 [ 1015.790368][ C0] ? lock_release+0xc40/0xc40 [ 1015.790385][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 1015.790405][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.906527][ C0] ? check_preemption_disabled+0x48/0x290 [ 1015.912245][ C0] rcu_core+0xc4a/0x1680 [ 1015.916504][ C0] ? rcu_fwd_progress_check+0xd0/0xd0 [ 1015.921865][ C0] ? add_lock_to_list.isra.0+0x450/0x450 [ 1015.927473][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.933698][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.939923][ C0] ? check_preemption_disabled+0x48/0x290 [ 1015.945624][ C0] ? __lock_is_held+0xb6/0x140 [ 1015.950420][ C0] __do_softirq+0x30b/0xb11 [ 1015.954925][ C0] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 1015.960811][ C0] ? kvm_clock_read+0x18/0x30 [ 1015.965482][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 1015.970575][ C0] ? sched_clock+0x2e/0x50 [ 1015.974985][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.981210][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.987429][ C0] ? check_preemption_disabled+0x48/0x290 [ 1015.993161][ C0] irq_exit+0x180/0x1d0 [ 1015.997304][ C0] smp_apic_timer_interrupt+0x1b7/0x760 [ 1016.002830][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.008366][ C0] ? smp_call_function_single_interrupt+0x640/0x640 [ 1016.014947][ C0] ? trace_hardirqs_off+0x310/0x310 [ 1016.020123][ C0] ? task_prio+0x50/0x50 [ 1016.024338][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.030575][ C0] ? check_preemption_disabled+0x48/0x290 [ 1016.036302][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.041834][ C0] apic_timer_interrupt+0xf/0x20 [ 1016.046741][ C0] [ 1016.049654][ C0] RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 [ 1016.055442][ C0] Code: c0 c0 83 92 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 55 4c 9c 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e2 0e 62 f9 65 8b 05 4b b6 0b 78 85 c0 74 06 41 [ 1016.075120][ C0] RSP: 0018:ffff88805dec7150 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 1016.083599][ C0] RAX: 1ffffffff1325078 RBX: 0000000000000000 RCX: 1ffff11002f86dd9 [ 1016.091553][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888017c36e7c [ 1016.099598][ C0] RBP: ffff88805dec7158 R08: 0000000000000006 R09: ffff888017c36ec8 [ 1016.107569][ C0] R10: ffff888017c36600 R11: 0000000000000000 R12: ffff88802b230d88 [ 1016.115522][ C0] R13: dffffc0000000000 R14: ffff88805dec73a8 R15: ffffea0001e65300 [ 1016.123497][ C0] shmem_add_to_page_cache+0xfd5/0x1a00 [ 1016.129030][ C0] ? shmem_writepage+0x1520/0x1520 [ 1016.134130][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1016.140105][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.146336][ C0] ? swap_duplicate+0x80/0x80 [ 1016.151003][ C0] ? trace_hardirqs_on+0xbd/0x310 [ 1016.156012][ C0] ? kasan_check_read+0x11/0x20 [ 1016.160847][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 1016.166639][ C0] ? finish_task_switch+0x1e9/0xac0 [ 1016.171851][ C0] shmem_getpage_gfp+0x161a/0x4b70 [ 1016.177162][ C0] ? shmem_add_to_page_cache+0x1a00/0x1a00 [ 1016.183028][ C0] ? page_mapping+0x56d/0xa20 [ 1016.187684][ C0] ? __page_mapcount+0x550/0x550 [ 1016.192720][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.198955][ C0] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 1016.205108][ C0] ? do_writepages+0x1a0/0x1a0 [ 1016.209942][ C0] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 1016.216778][ C0] ? print_usage_bug+0xd0/0xd0 [ 1016.221527][ C0] ? __switch_to_asm+0x34/0x70 [ 1016.226288][ C0] ? __switch_to_asm+0x40/0x70 [ 1016.231034][ C0] ? __switch_to_asm+0x40/0x70 [ 1016.235786][ C0] ? __switch_to_asm+0x34/0x70 [ 1016.240627][ C0] ? __switch_to_asm+0x40/0x70 [ 1016.245374][ C0] ? do_writepages+0x1a0/0x1a0 [ 1016.250125][ C0] ? __writepage+0xe0/0xe0 [ 1016.254532][ C0] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1016.259807][ C0] ? retint_kernel+0x2d/0x2d [ 1016.264374][ C0] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1016.270001][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1016.275450][ C0] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1016.281595][ C0] ? retint_kernel+0x1b/0x2d [ 1016.286159][ C0] ? trace_hardirqs_on_caller+0x310/0x310 [ 1016.291865][ C0] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1016.297137][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.303355][ C0] ? unlock_page+0x2b1/0x4a0 [ 1016.307931][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.314164][ C0] ? balance_dirty_pages_ratelimited+0x1b0/0x2380 [ 1016.320566][ C0] ? balance_dirty_pages+0x3740/0x3740 [ 1016.326011][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.332251][ C0] ? shmem_write_end+0x384/0xa40 [ 1016.337171][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1016.342865][ C0] ? iov_iter_advance+0x354/0x1490 [ 1016.347947][ C0] ? __lock_is_held+0xb6/0x140 [ 1016.352697][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.359008][ C0] ? iov_iter_fault_in_readable+0x22c/0x450 [ 1016.364879][ C0] shmem_write_begin+0x105/0x1e0 [ 1016.369812][ C0] generic_perform_write+0x2a0/0x6b0 [ 1016.375109][ C0] ? add_page_wait_queue+0x480/0x480 [ 1016.380385][ C0] ? current_time+0x1b0/0x1b0 [ 1016.385128][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1016.390842][ C0] ? generic_write_check_limits+0x291/0x380 [ 1016.396840][ C0] __generic_file_write_iter+0x25e/0x630 [ 1016.402446][ C0] ? perf_trace_lock_acquire+0x138/0x7d0 [ 1016.408059][ C0] generic_file_write_iter+0x34e/0x6a0 [ 1016.413524][ C0] ? __generic_file_write_iter+0x630/0x630 [ 1016.419401][ C0] ? __might_fault+0x12b/0x1e0 [ 1016.424143][ C0] ? find_held_lock+0x35/0x120 [ 1016.428889][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.435350][ C0] ? iov_iter_init+0xea/0x220 [ 1016.440016][ C0] __vfs_write+0x764/0xb40 [ 1016.444409][ C0] ? kernel_read+0x120/0x120 [ 1016.449004][ C0] ? rcu_read_lock_sched_held+0x110/0x130 [ 1016.454742][ C0] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1016.460185][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.466419][ C0] ? __sb_start_write+0x1ac/0x360 [ 1016.471447][ C0] vfs_write+0x20c/0x580 [ 1016.475698][ C0] ksys_write+0x105/0x260 [ 1016.480012][ C0] ? __ia32_sys_read+0xb0/0xb0 [ 1016.484751][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 1016.490550][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.496881][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1016.502320][ C0] __x64_sys_write+0x73/0xb0 [ 1016.506904][ C0] do_syscall_64+0x1a3/0x800 [ 1016.511497][ C0] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1016.517114][ C0] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1016.522826][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1016.528369][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.534238][ C0] RIP: 0033:0x457ec9 [ 1016.538117][ C0] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.557694][ C0] RSP: 002b:00007f3f3884fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1016.566089][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1016.574048][ C0] RDX: 00000000ffffffbd RSI: 0000000020042f70 RDI: 0000000000000003 [ 1016.582004][ C0] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1016.589969][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f388506d4 [ 1016.597922][ C0] R13: 00000000004c731c R14: 00000000004dcc68 R15: 00000000ffffffff [ 1016.607035][ C0] Kernel Offset: disabled [ 1016.611474][ C0] Rebooting in 86400 seconds..