[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 107.352710][ T32] audit: type=1800 audit(1564518091.399:25): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 107.376691][ T32] audit: type=1800 audit(1564518091.429:26): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 107.415677][ T32] audit: type=1800 audit(1564518091.449:27): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts. 2019/07/30 20:21:45 fuzzer started 2019/07/30 20:21:50 dialing manager at 10.128.0.26:44801 2019/07/30 20:21:50 syscalls: 2367 2019/07/30 20:21:50 code coverage: enabled 2019/07/30 20:21:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/07/30 20:21:50 extra coverage: enabled 2019/07/30 20:21:50 setuid sandbox: enabled 2019/07/30 20:21:50 namespace sandbox: enabled 2019/07/30 20:21:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/30 20:21:50 fault injection: enabled 2019/07/30 20:21:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/30 20:21:50 net packet injection: enabled 2019/07/30 20:21:50 net device setup: enabled 20:25:18 executing program 0: dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)) syzkaller login: [ 335.208556][T13048] IPVS: ftp: loaded support on port[0] = 21 [ 335.384702][T13048] chnl_net:caif_netlink_parms(): no params data found [ 335.453387][T13048] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.460649][T13048] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.469954][T13048] device bridge_slave_0 entered promiscuous mode [ 335.480946][T13048] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.488472][T13048] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.497663][T13048] device bridge_slave_1 entered promiscuous mode [ 335.536745][T13048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 335.550457][T13048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 335.587933][T13048] team0: Port device team_slave_0 added [ 335.598699][T13048] team0: Port device team_slave_1 added [ 335.908854][T13048] device hsr_slave_0 entered promiscuous mode [ 336.163786][T13048] device hsr_slave_1 entered promiscuous mode [ 336.554696][T13048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.579191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.593442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.612207][T13048] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.628165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.639148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.648492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.655777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.721114][T13048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.731608][T13048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.746339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.755979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.765679][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.774890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.782085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.790824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.801212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.811619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.821861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.831717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.842052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.851978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.861413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.871345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.880751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.899537][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.910162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.953630][T13048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.177736][T13054] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000000)) 20:25:21 executing program 0: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffffa}) 20:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 20:25:21 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:25:21 executing program 0: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 337.943784][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 337.943822][ T32] audit: type=1326 audit(1564518321.999:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13071 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 20:25:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000004000004c9e0004000200aa0802000000000000000000000105000600200010000a00000000000000000500e50000070000001f0000000000002500234e0000000200010000000000000000020000627c05000500000000000a00000000000000ff170000d18e7b81ce4a5aded7d42781c786000000000000"], 0x205}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 20:25:22 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) fchmod(r0, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x100000001, @empty, 0x1a9f6a5c}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0x3e, "b18695b7ed230b6c6dcfe49a88988ffa03d5a0e4e48ecacecc21fff79b4172c18b67a02991150681aa8488dfaf45b3813a4c95ad79c26ec4e13784d68c01"}, &(0x7f0000000240)=0x46) uname(&(0x7f0000000280)=""/66) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000300), 0x4) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={r2, 0xf565, 0x7, 0x7}, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500)=0xb0, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000540)=0x7fff, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x7, 0x4, 0xffffffff, 0x5, 0x0, 0x3ff, 0x10000, 0x5, 0x1, 0x1, 0x5, 0x9, 0x1a, 0xa0, 0x10001, 0xfffffffffffffe01, 0xfffffffffffffff9, 0xff, 0xfffffffffffffffc, 0x1, 0x400, 0xffff, 0x7fff, 0x8000, 0x81, 0x10000, 0x800, 0x5, 0x9, 0x5a, 0x0, 0xfffffffffffffff8, 0x7, 0x0, 0x7fffffff, 0x0, 0x0, 0xffffffffffffff01, 0x4, @perf_config_ext={0x3, 0x3}, 0x80, 0x9, 0x3, 0x0, 0x1ff, 0x1, 0x4}, r4, 0xe, r0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x141) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000680)={0x6, 0x9, 0x4, 0x80000, {}, {0x5, 0xd, 0x9, 0x1, 0x0, 0x2, "c7c0734a"}, 0x3, 0x0, @fd=r1, 0x4}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000007c0)={0x88, &(0x7f0000000700)="eb78784d4884ce766e5e44dc553cd3a5f7f984fdf413794b525f762e075dc4429207d27d53cb3fda5289781ce784ee2ab9893ddf5978970a15953b4c13030fb691e3b12dd542d5e4107b0d04617af0ec67b347d3d742e9a66b5b4edda0c40684032df6c47675393776410e4901ba677a79869ac164046cce8a3906c4d330c8d216eebd9935a23c19"}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000800)=0x100000000, 0x4) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000840)=0x7, 0x4) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x2, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x410083) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000900)={'bcsh0\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f00000009c0)) accept$inet(r0, &(0x7f0000000a00)={0x2, 0x0, @remote}, &(0x7f0000000a40)=0x10) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000a80)=0x7ff) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000ac0)) 20:25:23 executing program 0: r0 = gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/121, 0x79) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) read$eventfd(r1, &(0x7f0000000300), 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x1, @ipv4={[], [], @remote}}, {0xa, 0x4e24, 0xfffffffffffffff9, @empty, 0x8}, 0x401, [0x6, 0x0, 0x6, 0x6, 0x2, 0x10001, 0x8, 0x10001]}, 0x5c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x800000015) [ 339.161540][T13085] IPVS: ftp: loaded support on port[0] = 21 20:25:23 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc084) socket(0x9, 0x5, 0xf0d) [ 339.359001][T13085] chnl_net:caif_netlink_parms(): no params data found [ 339.471087][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.478632][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.487683][T13085] device bridge_slave_0 entered promiscuous mode [ 339.504794][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.512010][T13085] bridge0: port 2(bridge_slave_1) entered disabled state 20:25:23 executing program 0: r0 = getpid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x980, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x5, 0x371, 0x9, 0x0, 0xb85e, 0x800, 0x8, 0x5, 0x0, 0x7, 0x1, 0xffffffffffffff7f, 0x0, 0x9, 0x86ac, 0x6, 0x6, 0x2034, 0x7}) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) get_robust_list(0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 339.521011][T13085] device bridge_slave_1 entered promiscuous mode [ 339.576355][T13085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 339.610196][T13085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 339.647146][ C1] hrtimer: interrupt took 38342 ns [ 339.712816][T13085] team0: Port device team_slave_0 added [ 339.723276][T13085] team0: Port device team_slave_1 added [ 339.828956][T13085] device hsr_slave_0 entered promiscuous mode [ 339.944863][T13085] device hsr_slave_1 entered promiscuous mode 20:25:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x40000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000280)='./file0\x00', r2, r3, 0x1000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000240)={0x3, r1}) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() write$P9_RSTATu(r1, &(0x7f00000001c0)={0x66, 0x7d, 0x1, {{0x0, 0x4e, 0x46900cda, 0x8, {0x20, 0x4, 0x3}, 0x0, 0x0, 0x781, 0x6, 0x5, 'GPL#)', 0x0, '', 0x14, 'eth0trusted@security', 0x2, '+\''}, 0x3, '#{*', r4, r5, r6}}, 0x66) [ 340.036514][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.044039][T13085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.052059][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.059454][T13085] bridge0: port 1(bridge_slave_0) entered forwarding state 20:25:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x42, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x7) socket$pptp(0x18, 0x1, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) [ 340.196103][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.247897][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.274659][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.288408][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.308298][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 340.330130][T13085] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.356478][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.367757][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.377061][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.384342][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.447024][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.457445][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.466729][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.474012][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.483097][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:25:24 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0/../file0/file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x1808, 0x0) [ 340.493571][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.503920][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.515020][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.524975][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.535097][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.544934][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.554520][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.563872][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.573365][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.587955][T13085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.615677][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 20:25:24 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r2, &(0x7f00000000c0)='V', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x800011, r2, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x1a}, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x4e20, 0x2, 0x4e23, 0xffffffff, 0xa, 0x20, 0x6dd609a1e99b0a61, 0x3f, r3, r4}, {0xffff, 0xc0, 0x5, 0x80000001, 0x1f, 0x0, 0x3ff, 0x7}, {0x79, 0x100000001, 0x4, 0x5}, 0x80, 0x6e6bb8, 0x2, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d5, 0xff}, 0x2, @in6=@local, 0x3504, 0x4, 0x3, 0x400, 0xfff, 0x8, 0x2}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x98) [ 340.706115][T13085] 8021q: adding VLAN 0 to HW filter on device batadv0 20:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x2000000000100) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae78) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xecc, 0x12102) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x800, 0x450, 0xffffffffffffffff}) 20:25:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000000, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="8ba7ac1d3808c296997d0cd3ad3b8ba6b42d5a87", 0x14}], 0x1}, 0x10) 20:25:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) migrate_pages(r2, 0x5, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0xff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e21, 0xd88ab18, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x1d, r1, r3}, {0x0, 0x12, 0x0, 0x26, 0x3, 0x80000000, 0x7}, {0xfffffffffffffffd, 0x8001, 0x1, 0xa763}, 0x8, 0x6e6bb0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d4, 0xabbf8400bef5e507}, 0xa, @in6=@loopback, 0x3506, 0x4, 0x1000000000001, 0xbef, 0x7, 0x731, 0x81}}, 0xffffff02) 20:25:25 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x90200, 0x0) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) migrate_pages(r2, 0x5, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0xff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e21, 0xd88ab18, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x1d, r1, r3}, {0x0, 0x12, 0x0, 0x26, 0x3, 0x80000000, 0x7}, {0xfffffffffffffffd, 0x8001, 0x1, 0xa763}, 0x8, 0x6e6bb0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d4, 0xabbf8400bef5e507}, 0xa, @in6=@loopback, 0x3506, 0x4, 0x1000000000001, 0xbef, 0x7, 0x731, 0x81}}, 0xffffff02) 20:25:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffff) 20:25:25 executing program 0: r0 = socket$kcm(0x10, 0x200204000042, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdb4cb9040c00000000000000000090fb120001000e10da1b40d819a90600150000f0", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x4, 0x0, 0x3}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x23, 0x103000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x800100a, 0x0, 0x2}) 20:25:25 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x100000000}, 0x8) getsockopt$inet6_int(r1, 0x29, 0x8, 0x0, &(0x7f00007d0000)) 20:25:25 executing program 1: socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf9487) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000000000000000000008001200000001000000000000000000060000000000000000000000000002fadf0040e0ff00000000000000000000000000ada800a004000000200000000000030006000000000002000080ac14ffbbf0000000000900df03000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 20:25:25 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x1000000101) r1 = memfd_create(&(0x7f0000000180)='\\eth0mime_type$%\x00', 0x4) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000008) 20:25:25 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1aa) ioctl$RTC_PIE_ON(r0, 0x7005) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x40, 0x100000001, 0x8000000001}, 0x3c) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x50, 0xc1) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x4, 0x4) write$P9_RSTAT(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="470000007d11000000400000000c070000430200000005000000000000000000880c03000100861e009d9a500dc1cac8e0000400757365720800296d643573756d2d0100280000"], 0x47) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000200)={0x1, 0xffffffff, 0x1200000}) bpf$MAP_CREATE(0x4, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x20820000, r2}, 0x2c) 20:25:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x7, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="120151030000db188d9efc5ccd6509daff4905000000000000a09e09040906120301010909210000800122350d090581030100930105090502031f0000a513"], &(0x7f0000001940)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x7, 0x3, 0x5, 0x8020, 0x80000000}, 0xfc, &(0x7f00000002c0)={0x5, 0xf, 0xfc, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7ff, 0x6, 0xffffffff00000001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f70a20f9307d756af368ac1d8f12aeea"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xebc17d38f84100e7, 0x3, 0x4, 0x9, 0x80}, @generic={0xbf, 0x10, 0xb, "4552d19f3bd786ead9759a884d13f6beec4f6d6eb1b4382fe588989a6bed81281dd35b629f5417b08dd1380e4666950cd69d3738b72a22ec4ed818a9ffc7ae96c5ebf44546e0efb17dc421eac8a8b603b3ab61e61936b604d66fc96f0a9268339870dc80eb354eda53648a8b158de176b50c13472e91e115b2c50bd24821892f6f7259cd764d8fbb052088b751c6116f4e753c0ffc55696e43673315b450f9bf032149b5eb792f295819bf1913d97fac8658b4e74db2687351a6afd7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x1ff, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x5, 0x9, 0xb54, 0x9}]}, 0x9, [{0xc, &(0x7f00000003c0)={0xc, 0x3, 0x45d, "cc6b62b8c73f9b14"}}, {0xb4, &(0x7f0000000540)={0xb4, 0x3, 0x542828b77ae9ed80, "f2bb98390887b6d368063d0c0906fb1151e52ea4b7e1183d52e04e3330218bb3bac51b4d67cabdf97789d45a8150347a2a19b487dea21947441e4d55749972ed12cf232c865f24645979e60d104af26792e3e4d198cf2d96a8f0dc730552931bce1c851d5cab7888713841d54db933e6e443e7d7b28b2b99f0f7bee03805875cb3d98dd9592dce42356f2aae1c50486831d42e13ccac79c6aa2ad5d9eeeb8a12856a96c32724ffe868cc22ad83623749"}}, {0x1004, &(0x7f0000000600)={0x1004, 0x3, 0x40d, "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"}}, {0x23, &(0x7f0000000400)={0x23, 0x3, 0x457, "6549c7e578278896bd830a613e90836589a6062e28d9a08e760a9abefb593e"}}, {0xcc, &(0x7f0000001640)={0xcc, 0x3, 0x140c, "e764b29da08708cf2790b584015f550fdb901801bf42c662caf0164507cf0216ad565ee78f1787f892a20d515a4fe6509a1009898dc677cdf15c599cedf6d60e6ea00d6adbe1492b92e2aa4449afb56ea0e344ea378c23d0b229d0c49ec2e8c24b63dd8470c9fa37a7e8791e5c178f0eedf04978b4c8f3b0f7462327950032dba65344bb8f778d8573ef6eadc00cf8da79a9a603beb8790021291ed5a8d9e3813e9e4969f236e13de1747451b745f9eedbb143d2c631b8f3954625c227f8cd8e4803bc1aaf1824b9"}}, {0x1a, &(0x7f0000001740)={0x1a, 0x3, 0x448, "bb55cebeb1d2dd72ef2bcaa58973351b6672d15f2813"}}, {0xe8, &(0x7f0000001780)={0xe8, 0x3, 0x200a, "749d462de39c95da4dc9a4b263f8aa0c562f2b883f7426de0f4bbc8cb6e6699683fd73c44580250489bfb4f744a9616125366a0194f0637d204c1e2f88ff142ed0ff7637cfa9085281a0f869feaaebe8c1fdbd9d5d8e8c2964a0b9ed4e386fd8e94fbeff08b46625b65be22418879e67684d7e85a17d8a229f074cf3221034ab561df5dfbbdd1255b7655421b02db307cad240ba7dec3ee0c9e780f2da1d46c32c9d10f89eb9539c3f5b5a56d7099561ecbb29757f7dba3a98da29abe81d932a7a51808305d555c74e7f8f59830a53a00362f3f124f6af30bf261ef733d320e0705dac04"}}, {0x43, &(0x7f0000001880)={0x43, 0x3, 0x1c3f, "a14e7144a02d36122dfb6c8f30be24ce60d51ab0a202e1bb67ea41a04298c2770fcbf3259ecc87058addbeac0dd4f635e1e75b399ab2321c4094660664c1a2"}}, {0x4, &(0x7f0000001900)={0x4, 0x3, 0x140c}}]}) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="9d07957a1e52695f577b7701103eccdf9fe8c99911d8d3eeb8b8a7fe3800765807eef62e8b3850cf5e6549f8ba3866bf3acafb542f1c58cb295c21", 0x3b}], 0x1, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}, 0xc004) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001b00)={0xb, @raw_data="2f1a9f6f3b78e9a7775c47d89c55c8f01818c356e3ebf4401753eb69acd3957c0da3235e491255ed014af15eedf8f66834703c467ddb1943cfc1582421270a17fd486956aef8bfcb79a0601a93e7060d5961071b3ca38269ec40a6356adfe32061fe24cf664c7b9b4664ee191469455039324cbe488a912af3ccbe6079820012e6f8a973ee11a82b194407055ddfdff09389316b731dc4143ddff160392feca7a51293ef769dcf82ff39864bdbc43ca6888a0934cfa3b4f03f6877551281f4668f017fd306af2876"}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000440)={'filter\x00'}, &(0x7f0000000100)=0x54) 20:25:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5f0, 0x20800) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/115) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fsetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) 20:25:27 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unshare(0x24020400) sync_file_range(r0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() setresgid(r1, r2, r3) 20:25:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f00000001c0)='posix_acl_access*selfvmnet0\\mime_type:\xe1mime_typevboxnet0]\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x12) pwrite64(r1, &(0x7f0000000280)='u', 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = dup(r1) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f0000000200)=0x9, 0x4) syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0xbd, 0x1) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xfff, 0x400) getsockopt$inet6_buf(r0, 0x29, 0x800000030, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) fallocate(r1, 0x0, 0x80, 0x10000) 20:25:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200400, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xfc, 0x4) unshare(0x2000400) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') fcntl$getflags(r0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 20:25:27 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x7, 0x0, 0xa0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = accept$packet(r0, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003580)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000035c0)={'veth0_to_team\x00', r2}) fgetxattr(r1, &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/4096, 0x1000) 20:25:27 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80180, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x10202, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f610500020000031f00000000000800080015000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 20:25:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/150, &(0x7f0000000100)=0x96) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x8, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xe8, 0xb13862a792c8947a) r2 = dup(r0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x4) [ 343.449494][T13324] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 343.458343][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.551534][T13327] IPVS: length: 150 != 24 [ 343.558927][T13327] IPVS: length: 150 != 24 20:25:27 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x400000000001, 0x2000440103) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @loopback}}, [0x1, 0x6, 0x3, 0x8, 0xfec, 0x3, 0x26, 0x5, 0x0, 0x10000, 0x0, 0x6, 0x8000000, 0x1, 0x3]}, &(0x7f0000000100)=0x100) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)=@canfd={{0x0, 0x9f5, 0x2, 0x9}, 0x24, 0x2, 0x0, 0x0, "039c310355fe5ca21562b3c68b3d02f185ea067db999cf3ffda10aac82ebfe6329874f6153e358984b3a499be143039623ea60e95ec50e3da10e827eaa08e4e8"}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x4004040) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80}) 20:25:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0xc0400) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1627) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) fcntl$lock(r1, 0x8, &(0x7f0000000080)) 20:25:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80800, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2c00000004000000000000000000000004000000000000000000000000000000060000000000000000000000d70a998e52ae089043ca6b473677a3964e289dcb398249569edea7c5f540f0fe741fb0537b1532bd027ecb2ebc45744a1a20e0f07764b1552b4348a6df78626efcd5c2854d"], 0x2c) waitid(0x1, r1, 0x0, 0x1000000, &(0x7f00000000c0)) read(r0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) 20:25:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="115ca5055e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd000000000000007301430000000000950000000000000099386119bf9fe702164f75f1e8233350f0e3c1fec0daa9484911bb72288d80ac058dea615ecc6741ea39270cde82f2ed074b8e4f356753eff7f6a54a145071fc9436170acd348e94906bad0b0a0edec81f0169f89a0373dc82f848ba192a8a1a3bc3dea4889fa9b2dd86b4bdf99d28efc787a3d9f30183f024ed9806428ca519c7f400f7c89215344b43698f33ed8a606dea50eae09010e6c70b5184a8"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000001c0)={0xa, 0x1c, [0x63f, 0xfffffffffffffffc, 0x1, 0xf3, 0x200, 0x7, 0x3]}) 20:25:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fedbdf2508a80eaf7952000500060400080000001820e84270cc01000a0000000c0006006e6f6e650000000000000000000000000000000058f3e1a8639848b0d8ad712c659021d5b88795e41d4f237d98ca980942600345ec2995c8f634f44044862f91b23e2700"/120], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4001) ioctl$KDDISABIO(r2, 0x4b37) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x0, 0x0, 0x101, 0x1}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008014) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x36e, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x90900, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 344.237448][T13353] binder: 13352:13353 ioctl 40046205 0 returned -22 [ 344.369921][T13365] binder: 13363:13365 ioctl 40046205 0 returned -22 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 344.538109][T13378] binder: 13377:13378 ioctl 40046205 0 returned -22 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) [ 344.646516][T13384] binder: 13383:13384 ioctl 40046205 0 returned -22 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:25:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x90900, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 20:25:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3ff, 0x7, 0xca59, 'queue1\x00', 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:25:29 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffaa7a4c39ef90f1a4b36904a1bbd9c252fe4efcfc6a"], &(0x7f0000000040)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:29 executing program 1: socketpair$unix(0x1, 0x8000000000000004, 0x0, &(0x7f0000000100)) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1bac, 0x101000) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xdc9, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) unshare(0x8000000) r1 = mq_open(&(0x7f00000000c0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0xfffffffffffffffe, &(0x7f0000664fc0)={0x0, 0x1, 0x5, 0x2}) mq_timedreceive(r1, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000240)=""/113, 0x71, 0x20000240, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.145891][T13410] binder: 13409:13410 ioctl 40046205 0 returned -22 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.264075][T13417] binder: 13416:13417 ioctl 40046205 0 returned -22 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.314638][T13421] binder: 13419:13421 ioctl 40046205 0 returned -22 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.404016][T13425] binder: 13424:13425 ioctl 40046205 0 returned -22 20:25:29 executing program 1: unshare(0x600) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'nr0\x00', 0x3}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3da9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0xfffffffffffffee9, "df5c7c15d5273b33cdf153e65cbba63a1771b39c7a63dedb6c34b7346f561cbf764e130e8bf172b5dd11646876b2669acad20cf413f5c6cb1f28e68b3e140f6faeb83ad871a3c85321e62391a3fb26496181c14b6a3a22c2d933553296128bba1f72d906a40b975b4f8f74ff5afbf4bcbb53fafb30ced7519715213cde090f1ac110acaa26247ce58dc6d8bb0af3b8de0c3d6d42fa0cb482edaa4f4b810d431f556d222a04b4f71f876b1a0dc8134ef3f0638a0361ce387e3e2d80605fe9206de36879c916830303216c5c66bd7171947d22a4b61c6e39cd5407f9552afcf988f815"}, &(0x7f0000000380)=0x101) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002600)) [ 345.513409][T13429] binder: 13427:13429 ioctl 40046205 0 returned -22 [ 345.530612][T13431] QAT: Invalid ioctl 20:25:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) futex(&(0x7f0000000100)=0xfffffffffffffffd, 0x8b, 0xfffffffffffffffd, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000001300)={0x5, &(0x7f00000012c0)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001340)={r4, 0x7}) r5 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r3, r5) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180)={r6, r7/1000+30000}, 0x10) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001380)={0x723, "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"}) 20:25:29 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:29 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.672323][T13438] binder: 13437:13438 ioctl 40046205 0 returned -22 20:25:29 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.775613][T13442] binder: 13441:13442 ioctl 40046205 0 returned -22 20:25:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 345.873552][T13447] binder: 13446:13447 ioctl 40046205 0 returned -22 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 346.000742][T13451] binder: 13450:13451 ioctl 40046205 0 returned -22 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 346.112182][T13455] binder: 13454:13455 ioctl 40046205 0 returned -22 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 346.219061][T13459] binder: 13458:13459 ioctl 40046205 0 returned -22 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:25:30 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x13, 0x8001, 0x40}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x3}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='/dev/snapshot\x00') ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x2, 0x6, 0x7, 0x401, 0x7, 0x5, 0xb60, 0x5, 0x0, 0x800, 0xfffffffffffffff8, 0x8, 0x7ff8, 0x1, 0x4], 0x2000}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x5, 0x1, 0x2, 0x3, {0xa, 0x4e21, 0x9, @remote, 0x7}}}, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000500)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) flock(r2, 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000540)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000580)={0x3, 0x3, 0xba7, 0x0, 0x5, 0x1ff, 0x800, 0x1, 0x416, 0x1}) r4 = socket$inet(0x2, 0x1, 0x8) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x900, 0x40, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) close(r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcs\x00', 0x1, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000007c0)={0x4, 0x2, 0xd2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000800)={0x0, 0x0, 0x20}, &(0x7f0000000840)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000880)={r6, 0x3}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x33, @loopback, 0x4e24, 0x4, 'none\x00', 0x29, 0x9, 0x73}, 0x2c) io_setup(0x0, &(0x7f0000000900)=0x0) io_getevents(r7, 0x1, 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)={0x77359400}) 20:25:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) [ 346.694442][T13482] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 20:25:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:25:31 executing program 0 (fault-call:3 fault-nth:0): socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback, 0x5b, r1}) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) 20:25:31 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x1, r1}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x212202, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000080)={0x400, 0xb660, 0x6}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0)="db771e0ce38500ec7831a465393e444698c980dad43817b86fb3590f120f242f88f7e1b465b86fe9148fdad125acdf5b8e5a02327545f5e7925a5d077acc948db043113f25365615e58af635884c99e06f8b33bcbb888451077d74cae0aba637d83be8056175cc23173ccc16fb80e3a2e6a7d86c4acf82555d6db5c86a893680fd13287cbd49839801a9eb229582932f459f912b7eeff232d916e89102ff6919c4a1a440dcbc4fce70804b8d5255380b7e6d7a129a703d02517d2f765a6585662940191257281d0eab76cfde66c6429f49808d6fb66dd7c45e5b754cdb64af5f744fbd3b5d863b0e7d6827", &(0x7f00000001c0)="53e26f76a1381fd972a85ebba3ddf372067daeca3971a7c24428759aa4f63923a6de76e246ffa676f3d8f611bff71441ce87100310b75277ce66e00c7e93925b66c20d30bdd6f555b6e408c4e255e65769e1da5988be78e9900f08734bd56c2c21bf"}, 0x20) [ 347.256949][T13504] binder: 13501:13504 ioctl 40046205 0 returned -22 [ 347.272262][T13505] IPVS: ftp: loaded support on port[0] = 21 20:25:31 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xa31, 0x2, 0x7, 0x4, 0x9}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@delqdisc={0x80, 0x25, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, r3, {0x8, 0x8}, {0xb, 0x1f}, {0x7, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x8, 0x5, {0x6, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffffffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) [ 347.384553][T13512] Unknown ioctl -1072671997 [ 347.510306][T13518] binder: 13517:13518 ioctl 40046205 0 returned -22 20:25:31 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 347.614395][T13523] binder: 13517:13523 ioctl 40046205 0 returned -22 [ 347.629282][T13505] chnl_net:caif_netlink_parms(): no params data found [ 347.757387][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.764916][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.774068][T13505] device bridge_slave_0 entered promiscuous mode [ 347.852062][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.859460][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.870162][T13505] device bridge_slave_1 entered promiscuous mode [ 347.913124][T13505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 347.927853][T13505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 347.966915][T13505] team0: Port device team_slave_0 added [ 347.977540][T13505] team0: Port device team_slave_1 added [ 348.098186][T13505] device hsr_slave_0 entered promiscuous mode [ 348.233273][T13505] device hsr_slave_1 entered promiscuous mode [ 348.400740][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.408253][T13505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.416251][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.423544][T13505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.536665][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.561780][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.574892][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.587685][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.601189][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 348.624520][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.646668][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.656676][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.667359][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.674662][T13106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.739455][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.749753][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.758922][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.766199][T13106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.774977][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.785474][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.796000][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.806394][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.816370][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.826724][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.836811][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.846366][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.855950][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.865547][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.880441][T13505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.889982][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.959809][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 20:25:33 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x13, 0x8001, 0x40}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x3}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='/dev/snapshot\x00') ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x2, 0x6, 0x7, 0x401, 0x7, 0x5, 0xb60, 0x5, 0x0, 0x800, 0xfffffffffffffff8, 0x8, 0x7ff8, 0x1, 0x4], 0x2000}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x5, 0x1, 0x2, 0x3, {0xa, 0x4e21, 0x9, @remote, 0x7}}}, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @loopback}}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000500)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) flock(r2, 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000540)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000580)={0x3, 0x3, 0xba7, 0x0, 0x5, 0x1ff, 0x800, 0x1, 0x416, 0x1}) r4 = socket$inet(0x2, 0x1, 0x8) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x900, 0x40, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) close(r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcs\x00', 0x1, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000007c0)={0x4, 0x2, 0xd2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000800)={0x0, 0x0, 0x20}, &(0x7f0000000840)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000880)={r6, 0x3}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x33, @loopback, 0x4e24, 0x4, 'none\x00', 0x29, 0x9, 0x73}, 0x2c) io_setup(0x0, &(0x7f0000000900)=0x0) io_getevents(r7, 0x1, 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)={0x77359400}) 20:25:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 349.306686][T13540] binder: 13539:13540 ioctl 40046205 0 returned -22 20:25:33 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r2, 0x400, 0x6) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'ip_mti0\x00\xe8\xff\xff\xff\x00', 0x1f}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:33 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x5a}]]}}}]}, 0x40}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x4c, 0x14, 0x500, 0x70bd26, 0x25dfdbfe, {0x2, 0x78, 0x4, 0xff, r2}, [@IFA_FLAGS={0x8, 0x8, 0x166}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFA_FLAGS={0x8, 0x8, 0x98}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44805) 20:25:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) fcntl$addseals(r0, 0x409, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101402, 0x0) r4 = socket(0xe, 0x80a, 0x80000000) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0xa00, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x5, 0xa0000) msgget(0x3, 0x100) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x8100, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x2800, 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x10000, 0x0) r12 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="01012bbd7000ffdbdf25020000000c00020005000000000000002400070008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0c00040003000000000000000c00030004000000000000000c0005002c000000000000003400070008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c00060001000000000000800c000300ff010000000000000c0003000000010000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 20:25:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) truncate(&(0x7f0000000180)='./file0\x00', 0x25) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 349.677011][T13564] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 349.690965][T13566] binder: 13563:13566 ioctl 40046205 0 returned -22 [ 349.709491][T13564] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 20:25:33 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x100000001, 0x4, 0x1, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000036925e3141f49e9842e7c2849d0308ffff00"/33], 0x14}}, 0x0) 20:25:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x6, 0x2}, {0x10001, 0x7}, 0x3, 0x1, 0x2}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self\x00', 0x201, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @empty}, &(0x7f0000000180)=0xc) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x9, 0x2, 0x9, 0xfffffffffffff1ca, 'syz0\x00', 0x5}, 0x6, 0x20000246, 0x1, r3, 0x2, 0xffffffffffff8000, 'syz0\x00', &(0x7f0000000300)=['/proc/self\x00', '/dev/binder#\x00'], 0x18, [], [0x401, 0x0, 0x0, 0xfff]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4}, &(0x7f00000002c0)=0x8) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000001c0)={0x2, 0xd1ee, 0x84}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'ip_vti0\x00', 0x6}) [ 349.907891][T13566] binder: 13563:13566 ioctl 40046205 0 returned -22 20:25:34 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x3, 0x19) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xd) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x36) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'fclter\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x78) 20:25:34 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 350.165829][T13592] binder: 13585:13592 ioctl 4c07 0 returned -22 [ 350.210192][T13592] binder: 13585:13592 ioctl c0505350 20000040 returned -22 [ 350.225369][T13592] binder: 13585:13592 ioctl c1105517 20000340 returned -22 20:25:34 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000001c0)={0x7fff0000, 0x10000, 0x4, 0x100, 0xfffffffffffffff9, 0x8}) r1 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair(0x10, 0x8000e, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) modify_ldt$write2(0x11, &(0x7f0000000200)={0x3, 0x1000, 0x3000, 0x1, 0xacc, 0xfffffffffffffffc, 0xce, 0x6, 0x87d6, 0x2}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xd6, 0x0, &(0x7f0000000000)) 20:25:34 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 350.254425][T13592] binder: 13585:13592 ioctl 7004 0 returned -22 [ 350.277916][T13592] binder: 13585:13592 ioctl 40046205 0 returned -22 [ 350.320661][T13592] binder: 13585:13592 ioctl c0185879 200001c0 returned -22 [ 350.362691][T13602] binder: 13585:13602 ioctl 4c07 0 returned -22 [ 350.393534][T13592] binder: 13585:13592 ioctl c0505350 20000040 returned -22 [ 350.423895][T13600] binder: 13585:13600 ioctl c1105517 20000340 returned -22 [ 350.448772][T13606] binder: 13585:13606 ioctl 7004 0 returned -22 [ 350.468049][T13600] binder: 13585:13600 ioctl c0185879 200001c0 returned -22 20:25:34 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40180, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e22, 0xc3, @rand_addr="f5296c63c76ace46bac5140c1c1cb9db", 0x8001}, r3}}, 0x38) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$FIONREAD(r1, 0x80047437, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0xfffffffffffffff7, 0xa54}, {0x9, 0x1}, 0x1830, 0x5, 0x6}) [ 350.496638][T13592] binder: 13585:13592 ioctl 40046205 0 returned -22 20:25:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = semget(0x3, 0x2, 0x158) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)) 20:25:34 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 350.739757][T13616] binder: 13615:13616 ioctl 40046205 0 returned -22 20:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x3, 0x30}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 20:25:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1af2, 0x181041) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'erspan0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 350.785606][T13619] binder: 13615:13619 ioctl 40046205 0 returned -22 20:25:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 350.917557][T13626] binder: 13625:13626 ioctl 40046205 0 returned -22 20:25:35 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x101005, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x6, 0x7, 0x4, 0x4100, {}, {0x0, 0xc, 0x1f, 0x8000, 0x10001, 0xffffffff, "6d821f12"}, 0x1, 0x4, @offset=0x10000, 0x4}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ftruncate(r1, 0x7fffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet(0x2, 0x3, 0x19) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet(0x2, 0x800, 0x800100019) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0xffffffffffffffff}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000100), 0x4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4140, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @mcast2, 0x100000001}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x10407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000300)=0x2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400400, 0x0) ioctl$BINDER_WRITE_READ(r6, 0x40046205, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x3ff}, 0x28, 0x1) 20:25:35 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f0000001bc0), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="0400e31b516701000093c21f01000000de706f646800580f02000000003f420f000000000000580f02000000003f420f0000000000000000", 0x38}]) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0xfffffffffffffff7, 0x80000000, 0x8, 0x14, 0x601e25c7, 0x1, 0x100000000, 0x7fff, 0x7ff, 0x2, 0x4, 0x3ff, 0x9, 0x418, 0x8a]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0xfff, 0x6, 0x2, 0x1, 0x7f}, &(0x7f0000000180)=0x14) 20:25:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000140)=""/222) 20:25:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32=r1, @ANYBLOB="0000000000200000000000000010000000000000", @ANYRES32=r1, @ANYBLOB="002d64a6b38719b8dcebbb000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000010000000000000"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 351.124132][T13639] binder: 13634:13639 ioctl 40046205 0 returned -22 [ 351.157150][T13643] binder: 13634:13643 ioctl 40046205 0 returned -22 20:25:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200200, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000400)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x4000, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x20}}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xd6}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7ff}}, {@default_permissions='default_permissions'}], [{@audit='audit'}, {@uid_gt={'uid>', r4}}, {@obj_type={'obj_type'}}]}}) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) bind$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000680)={0x1, 0xff, 0xfffffffffffffff8, 0x20}) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x101000) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 20:25:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4402, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x80, 0x2, 0x1c, 0x5, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x6, 0x6}, 0x8) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) [ 351.336849][T13651] binder: 13649:13651 ioctl 40046205 0 returned -22 [ 351.362173][T13652] Unknown ioctl -2108641626 20:25:35 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x5) ioctl(r1, 0x5, &(0x7f0000000000)="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") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") 20:25:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x3ff, 0x4) flistxattr(r0, &(0x7f00000000c0)=""/219, 0xdb) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7ccb8) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4a07fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x9, 0xad, 0x3}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) 20:25:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x1008000000000002) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffff, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_INPUT(r3, &(0x7f00000021c0)={0x8, "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", 0x315}, 0x127d) 20:25:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 351.813258][T13682] binder: 13681:13682 ioctl 40046205 0 returned -22 [ 351.845241][T13687] binder: 13681:13687 ioctl 40046205 0 returned -22 20:25:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@local, @local, @broadcast}, &(0x7f0000000040)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400800, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) 20:25:36 executing program 2: mmap(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f000035dffc)) 20:25:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x278, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x73e854af}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc84}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x19}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x108, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9b5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x251}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x119e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff26}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4090}, 0x4000004) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0xffffffffffffffff, &(0x7f0000000000)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) 20:25:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 352.013152][T13694] binder: 13693:13694 ioctl 40046205 0 returned -22 [ 352.022227][T13695] binder: 13693:13695 ioctl 40046205 0 returned -22 [ 352.033398][T13693] cgroup: fork rejected by pids controller in /syz0 20:25:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@local, @local, @broadcast}, &(0x7f0000000040)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400800, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) [ 352.223975][T13709] binder: 13708:13709 ioctl 40046205 0 returned -22 20:25:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x200280) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/223) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x9c9, 0x4) [ 352.264178][T13712] binder: 13711:13712 ioctl 40046205 0 returned -22 20:25:36 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001100)={&(0x7f0000000bc0)={0x2, 0x0, @initdev}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="18", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) 20:25:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/162, 0xa2}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/240, 0xf0}], 0x5, &(0x7f0000001b00)=[{&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/128, 0x80}, {&(0x7f0000000a80)=""/34, 0x22}, {&(0x7f0000000ac0)=""/55, 0x37}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0xa, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x404002) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) mq_unlink(&(0x7f0000000040)='/dev/loop#\x00') ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="73815b29da060b0b748bdc7b047a2fbf", @ipv4={[], [], @broadcast}, 0x3, 0x531, 0x6, 0x400, 0x5, 0x800000, r2}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) [ 352.577447][T13726] binder: 13725:13726 ioctl 40046205 0 returned -22 20:25:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 352.688197][T13738] binder: 13737:13738 ioctl 40046205 0 returned -22 20:25:36 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = accept(r0, &(0x7f0000000140)=@generic, &(0x7f0000000080)=0x34c) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x40, 0x4) request_key(&(0x7f000000aff5)='user\x00', &(0x7f0000000000), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 353.063787][T13850] binder: 13849:13850 ioctl 40046205 0 returned -22 20:25:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2080, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7fff) [ 353.332198][T13960] binder: 13959:13960 ioctl 40046205 0 returned -22 20:25:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:37 executing program 2: r0 = epoll_create1(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x800) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r3}, 0x14) r4 = epoll_create1(0x0) close(r0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000c85000)={0x1ffd}) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000080)={0x1}) [ 353.519609][T14050] Unknown ioctl 35123 [ 353.537215][T14050] Unknown ioctl 35123 [ 353.546673][T14050] Unknown ioctl 35123 20:25:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 353.573208][T14071] Unknown ioctl 35123 [ 353.584065][T14050] Unknown ioctl 35123 [ 353.623589][T14071] Unknown ioctl 35123 20:25:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="872ab9076f22b214c8fac407c3be47d8", @ANYPTR, @ANYBLOB="f53ac015172ac4b25c7c01a92373c719469c0035e0f60230a27678d7f134be517bb19508a91e40f74e5601f60fb4553e8391e8e67ca6715452dbacbb5efd61c08795c707", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES64, @ANYRES16=r0]], @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000020000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b356000000"], 0x4}}, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80003e0}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x304, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) [ 353.692771][T14075] binder: 14073:14075 ioctl 40046205 0 returned -22 20:25:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) readahead(r0, 0x9, 0x67) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x900000000000}, &(0x7f0000000180)=0x8) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/8) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRRPART(r2, 0x40480923, 0x0) 20:25:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 354.050387][T14194] binder: 14192:14194 ioctl 40046205 0 returned -22 20:25:38 executing program 3: getcwd(&(0x7f0000000000)=""/101, 0x65) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x8, 0x40, &(0x7f00000000c0)="13e411bcf982452d7feeb60e5b9790f2f866c7c1901982f0613ee45b2f98cec7165408995e310c762f60b8abb68b932a96b0239c3efd53e742fa647432535812feae6d95f13f67c68bc27221604a68b96f6d12d76c5db1530a9e3028f9f6c1b6c355fcab7acc402aee73713a519d14ccdbfa9f680858f05013de55b9d9bf6da7c6e6f711436ad9e64867556f51c5c7e0c125d336dc0e4413565a7602b3fa81cf5a26c7009dcf7ea1b4d1a75c1ac94fae59c12e9fd5851ac1d54544405f1837a9840072a0473b8f0f800d09c3e3", {0x3, 0x7, 0x50424752, 0x0, 0xd7, 0xfffffffffffffff7, 0xb, 0x37}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x102, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xfffffffffffffffd) r2 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x6, 0x400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000380)="623325792514564a1b1bf3715e098bd4f63084d47ebae9a42337a1a3c43c61b033b81f0edb1d37a426f5a03be81838f18829d4d26bc5e9aa8741d5b5a74e246a082ef8a7eedce861"}, 0x10) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000440)) sendmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="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", 0x1000}], 0x2, &(0x7f00000015c0)=[{0x1010, 0x187, 0xeb38, "675dd8845dd165c9932cd0c48ea7186b48fa2818d78379fe2a4ccb5a16d344037f67eaab730eb5e52f8a68ffa23c0ab2d1306c70aeea412fb2f960437d44909091bacb06b20a5b021b1660ba7c9a56074881c7fceddbd7a3637cb0323586a2582a1588f7ced69ab4be3a50de1be7312d533abc135d783a8dae5e40eabfb29f27507d1e30435c8b7d0666fea3d0a3fd4effe5b54c433674363447910bbb6019142c77eda94e6a244b0d4364c9d56b1a19ec45b50f973586531d779ee5aeeb9a3704ff64eb3b3f4226ad19342e9c0f6045f002e6568f5d354a9c3c461ac0dc350ad404f955e19238a2143b484353c1b52843281eacd9a8e8aae9b4650e8b2c8d15df403b8b1f7b23c7ebc353a0a256ba2ee46a271028edd9a0d48caafc8817e3cda3be7c0b2a26df74df2a7408cc70cd8737ea4cd17a0c1ceec0f51b3c42ff1d92f8a0e14f850dfd09eac8839d332272b20406b9d7b67038a1e78f78ddc1db7e2a098a6edc44a1307d1ef6f08689826674dcf936ea4f0fb51194ee81643798b59e6749135d04126171cd3323ec7fcb71a2d0b5cb5253720fdf3706961bdb13b2e602c8fdb574bcdab5ad7e2f5db8550ebfda1f801e36be4ab2fe8ab81e31036cc049d3db110c2fb3c72e5f5843c5f77169ea95f75bfd713c58bcb92f366cf5e31319c6d95cf130d8e4c986726ece6ff6c5573918fbb4b7f07fa6542e438bdf12072ed3b0cccaebbd9206f19f28dd18da5a076cf9805d47df3e7e8773b7a78436c6b0daaf69cd023099dda24dd9b4a40fb680d0caa2e0d348d3b67d99adf31c51e28525bc2268e445a5756022d6982682cfac3be4444404479c75034d2fa6be08d910dd8b16a91b3accceb7540784d946c62531a34560be9f5ac9e9500759ce85e6dbc7a5a9f804f5e49cfcee24a1424b86ced4b9c1474542146b2e76a1310f5c025d9cbb7d5daf742bf698c013b6311bfb68c9c5eb914b603e325db164e35aad39d462174ef5d17309ed4e69d3056330c0fa06e7388947bd61266e4918f5651ec2e708c63bb789ee42bfbb5dffda6943e3f9cf131c9365670d2b5a912dcee783223c45e26765d802fec30b1d04aea5f8ff4de3e24801513edb09a4d74d137850de596b5734bfa06d8c57b2b50fc708ca26c997303fc7024dccd524bd0eb5e9aee4bb7925ac3418755c0effc1ec6fa845940ba4d195ca518f2f5adb6fad02253b620fe8c703bf68cb335fc9a4f08561eced4437eeb40482bb0e5878b3dc1f67a7e984a13dcd6b3f327f853ef21d782755bdd0279820b615f3b5d9b8393023bed44327b0243ecf454f2cdcefcbaac4a3c26009167372ee96515bba6e7582ee345c2486d6a6098cc1c97f3523e43be74acf8a320a4c675daae307f86eb3a16cbb0198090d63eb4bebb98b944a5bc9e46708ef77b35a1aadc668264856d638138d5046abf68587d96e1b148c5ab84a83dda75d42bd641926b08b00897b294f071a6541d228f4ef78b5186c3a62e79c4585e23a7451c654a5fbf92a4587e92104aa1be4eda2f4226fa0e7165348928b7dabae061dd475da6325981cb13c424ccc82b07368bc709c8188e39521f9034dc6dc8042ce0868254a9ea64abad2814b74bc289cc7f3a1bbb6341b99b1a65168802e1e27ba4f431da0b312e9fd1eece53ac90adbe38c4a0004fbba6915fb8ed156a68e807f0bf5684216e1c5302a1e7168cc7dd33e952c1d8e28621f120e75f95c35fa81552a1b06c72c1c9368852a3e096d30ab51d8b4456c528e7f04e69254e3b841d06cc2ceaa308d0024b90aeb8dd8406a658b3331b8c921f25ebe086a8c6a2e88b80f70e216d339ad4e723ebf9ba531167cc0590b59eb99b9784ff34f2fb238db5f47b9617e3736163edb847add026348c9423b8c7edd943eb9e5a387c48b488e14b401bf8788d7ae1271e476617300ceeb4c003bdab266245b27cf41f0f2c581fd574b0472eebf64ed39f84617c516bbd9ad263c28c5b82afefd6fe148543fe2f133f83268be0401f1be6eb407512f12d9a1dffb7836161020e8be0b5b8e805e157fb5221452942b144484a991f792099d69460eb4d10e49418fd41ba4d354bac10a2d4930a04a36bb98c6eb9561031e7f2292f78745faaba2d15ba3a3655f2b01d2eaf86a5a5f0768373e17b613b8fc688191019df080badd1485b5b0319ba1737bffa61f4e1b7caccd338b58c1c6530f8eb57a6fd89cb8e2715679a7e574bc49860dc06903cea0b1e70394bceab3d0e46caba5ac6af0c2aa88364d5e440a53c07c9d553a4545ba870fbcdc9a51db8e390b398899f6a3eb3a6d292ef93f1a5e10a8b019628b3e67aed7511e480b570754264c3b7d27062c9f4f21958b9da8512f2b747ae224bfe27085e691e6f36f23d094271aa209a51a543951fa31b3003530ad16b95e9ece32c25d2a0bd7de3ef4c6d1f051a49d352a4c0e48d1706d77d4d8a5d16b59537758031410208f60fbf181b5ace80065bce4e861e92e6bc37f2ad9ce66b0983a57e3a8c0bd40dd6c6f3a0e8e1debfd6615c81d64c6106d5da1387b7476f943b4d145ea0732f71d7cae6edf09a81d3447b03a8fbb432de78ebb48a839a9bc419bf52f21689c948314161f0d223b522dbc924ea597795877742c843da73b56d53a6b157cb574c4269faf6fdef3ad551f5b37a4788f794946c9d9939eaaee4f5cd2a4f15e782cc4d42a56961e6ab40a04fb44b6b6a12780d081e6b74f0e88cb72b43d450723c9ff98efe671946ab8f358766278c8140cab1c2e8184d7d153afa279b7b88b39afb26d3281eb8230e9f16cc4c32a5a919e1bfd9d603b4b11d6623f6301226345545f9786295182fee2fa31117e755573f55874cf43ec247ae715a70467ada25615f17f9ad659cbb8c9dee6af4b78cb67cc19ce5dca84bac3b0313d91922a0ca20e5707ff673fa2c2832bca52fd13d4be22d6ca723670790c52d9bd7f7d6bd255a6d88feaad3b6b3b3130013c4697017c0b3ffae24017f2f81aa6ac8cc4fb86e3ae306b2f709405cea8d94656f44829016a25f5c24023ebde9acca43ad8e471ac1bd20a0d1ce92154255d28f98b8663b5f2d4aa48e6a01d2b2b1e0ed39cf59dba35e46b8451cb24fab335356376e8ce3e712843a242a6ee31c0f2389d30e98884f0a7fcf7bcbb90115aeca64665f225b567a8f18890919432494b7caa2b7102abafe72655a4b462984c53894690a17285dbe0fd3fd8587df779c51ef0f4effb3c04db4ce4f213814c948a1e4d1ebbe7f35046a480d00607e272287db5e20ed6f673a4f80c519156aa1555cf73bbdf3855737ec57fd43fe5732ddc7e42aa0127e5deb236c563b82526f5533f7a6366ccbc84129c0f15860ad1ecca6b591fef58bfbde9ac691d4ea60fe3170dc155e25f4cf31c8d0d68ec087bc8ec8d189bde505cf888a1a431202c94fbce13547568a0b4da0260c656c522cb1066f81d29adef004a75e9c168f4c2597e58dba021418d1712ad5897088e725f50896fa178f29e430298c7f31221999c87df4e7042a97901cd3770d68a5b657f60b6bf4a38c36a527a3bd3471faffb483d4e47c061e212292c80680d0cf3c3ea63bf07c78c97c43b8473cfe3b16cc335ead13b8169bc0307e7200acd68cae4d5fb3703d505aaf497a6be79256b5237f1d3dfec40df3c9f7411714158489da22c0d54b8d1961f248db50b05eed1563ec86d5feefdb8ff741d3e528279b288320c3b9c57a62806bce2ad04ac7268e13fd3b0d279b7d2eb5624d98b4677eed712564121a99fec62846da4fb1cf54d0aae8ba7933e8b2b709d7332c2fad814aa2d7f6eb94e91c048be468c69ed0d01c10154fc12a33eb42a2afa40445829d95aecdcff2ae59f9ca7253c487eddc92b0e5d1b3996e063e9a2f30968f85a0816fe0033692c1a2655b35695d4d8458dbfacaf8adc89b04bd19b795d262484bae73ddb27674b21e3b6ff9c480d9705bad830ed771f99227eb05ad63664c8151289a09e8328236f6c6bf141f4afe317c788f9db3ec1a27d69c72b5f5c3f984709b7ff85813c4f8a18b1e1e84f5c37c6e50caa35ef80979b487208a5ff6db24bdd474e4db78d8c50e2ecb43b78f98a37748d33d4c79759ea76620ffa0d2952847d7970c3b1fc2e885bc5a8e1cac8d1989808458227ab1194657e24b7f7ec6a7af034327edc6826d5e88c53567c2669885e9139d023d2ad33b1f88d044258287902940b93ed1e676bc22e0ceae7e3ecae75787f6ad0f40dec3a81fcf41959d58c46b6348a2508c6af7c4239feec910a9c8b294292fb027d808f8ef5673097359e9c53e278bff1d4a6d9f8c09cc3d210e6ecaeaa96597f42ec43244317aff6662e0e494b903d018e3a9a704f9ed9ce2cbb2734233c25637793b116e5f30f2c20b9a222ee783cf581ecb62d327ed99813df66b9b348c2cf8310ecfbc40b15cfc545d2d8d09498ae875e27e0374429723d96fc490b843788c90eb99ff0bb23990357a03f7108d0ff9b2fef2156a6a0cca277f0cfb0619791e96e6898651df33b0929e036ab718f7c64e22a85a3b16c03f1594b4773faec3b56238ee8017094cfa8e33ae6c4460cc029535cb8b46fb246059be2e3d3df44c0981f3eae8431c3732a639d4d8bd6abf19dacd89c056a981475cad95164c031b84651daecdfad30af8ce3b13656c101b5500f41d74c3cf49a8443a05d543674d194135b0423badc082a39bf479b86968464e188eb4a805f2ed3305a1ca667c9d4e1f2233c645807d12934d2263457a6517d9ee9656c7ac8e771ad794ed17955c5a5ccbd51a68fa5fe1dcdc7a394daaf0df167c6ec980d19acd57f1d03c547b331d0050f82b76da8f28850209ce78eac5bf83679abe0e46b06b0cadf991ab0ca727d04f71a81b3e63813ac2fef55329ee71c01204981b4792a01ee368b6b9bf12617ad55322aa21f1f4ecea09a942a88798c390f422479691f061d706ebb8cdd65aaa0b56bb2c29904cb821552a684dc7248f4e4e6904ef9940bc36ce2cfb382bc86032bfd54fd56028f66ff0ccf4029578e2fde2d435bd39a37ea75eb077993aee90207cfdc8f941d1386d7acf14155dc3d574168ee0a9ec8b6a0b23fb16c7ba3709e6385df63d935ba1ae68fa6cc6f8f835d345d3b51ea116eb55e14b9305a23d20d2ddecd9d11fd850d005bc6916a296c7fc57ded6a62b5e5097c713aee59f1fa358c0a0347037fdbe3c969930348426c6b765e20903cd4aeb08444d90df223efa94c5f9fef108bc052ecce1256a64c5f333129995b4cfa187a65e238170222f708fce55596833e70d4c6061f044979853f8e8c7754155db54a17ac1eccb3518746d8fffe47126c76a65ce2768c8b789599c10c12528f3b7cbb52c6b33d16c5e0b08d4903838903beecf917545f2fe69fb088ceaec000475cdbae7207bc7c7f7b1c18df9ed72b7b7d72d03931133abd0245babc3f8fd69ab8f56aaa8c3502eefb7b06c699b27ec82c54ed3d155c5e1950493b69ef78774e00946b4a50d884b6e15e4a140a6b0076f520ebb4d6bae5ab3214e4791ac1389640256b55923b63ff3dc783e938ca728ceea55018f8d072bdd38320d68a6376d7af36ff6fd05dd72a3490a8dbb72762650980d6b89b7f5f6fc1d80eb9d967d6823839a1be47671c4c191c84d8b93e5a69c8e01efabce725f389bef495f36e4358be8dd78c4ed3361a7f95c145fa1f469dadd6e7ff3bcb28ab8801f1b8e4694ec337563f769341ff087d8cb443c0f98ba3e8ababa7f8522532c701fa0efe7cae8bf1f47764b246"}, {0xf0, 0x104, 0x0, "4f15fd75439d8f3509b98b5f3c5907f73198eee08cc50f79e45eb8b16d7fd894a11dcd48112f68a74be2e06296159246898b9836bcf09719e41c7b469067457b07b500a03a8b793012e6bf8c8d70dd0637606a0bf32e6a68cfae3ae3c109afde4b1d18d15d97e717a1577f2f72f4d693292da0e401857374e35c3708ff39639830f196c5a63b40ec5a8768ede32ca139d11a67948fe9f6a3327cefb6db57eb655b903994684fb19188cbdf9a72421bf33f72455158e816d9202915c9f8dcf6ed1e3c87f76b8f9716a286f6f4e1d536f4f54e311ac00d2def1755d46091a7f4f4"}], 0x1100}}, {{&(0x7f00000026c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x4, {0xa, 0x4e21, 0x80, @remote, 0x2}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002740)="918a5d846b746dd7f5d1571851880e7d20c5c4c00e14115d6f93fb4f452d88fc6f2a65199f95057684b08a1c207eb895a549f551678dd7e26373a7f608f9ab2ffe9e2a659b5984a931a43d0768276b", 0x4f}, {&(0x7f00000027c0)="2251df4a974187c25d9299d6121c5d45c824729fbf7d1adefa5ee38cc42d98a0f778b1b299c55ce1157ec0f6ceb9d17df84f2c172ef1061c6b49cfa1d5466168d19d8f82a681fc8e27a3b2b1cf504fc8d33db5a8e2e5c35d4a295bd4aca349ec545b53ce9d543bf7c7c867c14a322fd1ab09389cfe7524eab6406c9cb1ef648e39f87e772d47b8e26bbaea85a67bc0876f8bf875bb843b484acbe5eefedb3059dabee7db79ac3745496b9f173fa148677b7a4e24d86c812de45f38fd69bd41496fc6d22fabc4176c64981759059a326385bd4bb1fcbd08178c4e7478f589f67e28e2c72a87f9eee963d1a26713ac7858bac331b6a2d4", 0xf6}, {&(0x7f00000028c0)="372c11b2368e3bf7315cccf2728abd694c", 0x11}, {&(0x7f0000002900)="23c6d675fbe68167658998f2c639e4b9f37ff45a5b6bfc2b58b3d7ce9277c8a9407428073df3b8689965976c8fafd2dc8d455eedd656647799fcf94bd5b29e4f0f2a2372817cdb9fbe5359260ebb53094e7fc1bcaad0ded583c9c5e3be9d3f30e3ab4926b8f483c0331ae23207b5c149b32012fd4c4309b6650ab4d3ade39f19a0a640e5255d", 0x86}, {&(0x7f00000029c0)="dc21321d4c7351851633ca8b7f38e800d6933161a4051714a42936d0ac051700a3a2d4e181419d3695293db26e43730a87413a114e4f533e1dd2f163bbe145d0e96a399e267695b551800192b0efcf4a4becd686c291b4b9704622aa9de68940f585525f91aeee", 0x67}], 0x5, &(0x7f0000002ac0)=[{0x78, 0x1ff, 0x1, "43c1ebc063a5caa3e743e1d5bbd58fcaa6e88a96830ff7ded6f985e737f4c2e1281de40dfaf17072b0083ef3ee10305d4e8969796fcaca9bcb0c0d8e75885a02db2c6fc4882fda0da93d3901b3fd1db3b8064d7552cb131c2681b1ebbfe5ce7067"}, {0x38, 0x11, 0x10001, "c64a626cc984a3c1d86a8d491d143061f3fe837a1a3018622a6472fabd8275fea24fb9e5"}, {0x18, 0x0, 0x4, "f603c4"}, {0x78, 0x117, 0x2, "1dac5e20bd8d3551a86000f985899f4a5a53f86a6b3ba2cc74cc074133754e6cb997f53e82a7aeff3eb7cd57cb6fdae928feb355242423ccf1553dc10cfa086c730a9396b7bc74c16ce5124b0509851792c1853ff1f176d150369da94dae66c834"}], 0x140}}], 0x2, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002cc0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002dc0)=0xe8) quotactl(0x81, &(0x7f0000002c80)='./file0\x00', r3, &(0x7f0000002e00)="d8a746c6d524796a609a6b0f965624dcd6a7442dab266d9ef3721d45ba873b91901724a02054214c9766a786820083417a8f7b485bd33279a6bf737725a49ec1ef5befa4512b75e80ec72f55") ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000002e80)="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") ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000002f80)={0x7ff, 0x0, [], {0x0, @bt={0x10001, 0x2, 0x1, 0x2, 0x4, 0x1, 0x0, 0x800, 0x9, 0x7, 0x1, 0x6, 0x1, 0xb6fd, 0x1, 0x10}}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000003040)={0x0, 0x7fff, 0x30, 0x859, 0x387}, &(0x7f0000003080)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000030c0)={r4, 0x2, 0x30, 0x8, 0x200}, &(0x7f0000003100)=0x18) arch_prctl$ARCH_SET_GS(0x1001, 0x2f4e) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000003140)={[], 0x2, 0xffffffffffffffc0, 0x72a, 0x0, 0x32a, 0x6000, 0x6000, [], 0x20}) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000003300)=0xff, 0x4) r5 = fsopen(&(0x7f0000003340)='coda\x00', 0x1) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) setxattr(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)=@random={'osx.', 'coda\x00'}, &(0x7f0000003400)='/dev/swradio#\x00', 0xe, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000003440)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000003480)={r4, 0xed, "309a6552b9c7c2750031961d60192145d82090ef2f04311464a7e44cb63880ce9cfabecff370782285fbaed9e73ce124552f786bef5341621b64041cf59d79aa853be58cd1370e0c48b61e92e3bf96fdbb0dde1b79df253b12f093afc03cc015b50aceaefb70bd92e5fa26ea3860624298683751a7a2f5bb41ba48dfbf5c89d58a1539f9d18faeaf8de6430b2d6b58fd24d5e3139483d398c04b1156797adbd20eb4a8c6b8625c74f2c35594a30d008b189edef3baf2d8e87f938c21c7b7473f9945da3aba076cbd0395f0c1f7f07c3717fffbbcc98ce6ac28fd96b8e4b36cf0f7948a97553aff3bd25fa06803"}, &(0x7f0000003580)=0xf5) connect(r0, &(0x7f00000035c0)=@ipx={0x4, 0x80000001, 0x7, "624454065def", 0x7}, 0x80) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000003640)={0x3, 0x0, [{0xb, 0x6, 0x3, 0x480000, 0x1, 0x84d}, {0xf, 0x5, 0x0, 0xc4b6, 0x4, 0x4, 0x1}, {0xd, 0x40, 0x3, 0x0, 0x0, 0x700, 0x1}]}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000036c0)=0xbb3, 0x4) tee(r6, r5, 0x8001000000000, 0x1) 20:25:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) fallocate(r1, 0x2, 0x2, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620c, &(0x7f00000001c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x8}}, 0x18) 20:25:38 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:38 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x0, 0x2, 0x1, 0x9b35bc24108eb00, 0x40}, 0x0, 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x2) socket(0x28, 0x0, 0x28) 20:25:38 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8f6e, 0x2000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xffffffffffff3f52}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6a}}, [0x10001, 0x9, 0x46, 0x1ff, 0x8, 0x7f0000000000000, 0x9, 0x8d, 0x4, 0x400, 0x3, 0x7, 0x7fffffff, 0x9]}, &(0x7f00000002c0)=0x100) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) [ 354.524243][T14311] binder: 14310:14311 ioctl 40046205 0 returned -22 [ 354.555636][T14315] Unknown ioctl 1078481924 [ 354.574330][T14315] Unknown ioctl 1078481924 20:25:38 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xffffffffb22623cf, 0x1092ff) r1 = getuid() getgroups(0x4, &(0x7f0000000040)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1040, {0x0, 0x2, 0x2}, 0x8, r1, r2, 0x7fffffff, 0x9, 0x1000, 0x3, 0x227b, 0x7fff, 0x6, 0xfffffffffffffff9, 0x1ff, 0x200, 0xa384, 0xfd, 0x4, 0x800, 0x1000000}}, 0xa0) membarrier(0x2, 0x0) 20:25:38 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:38 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-ce)\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast1, 0x9}}, 0x8, 0x5}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0x1f}, &(0x7f00000002c0)=0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$link(0x8, r1, r1) [ 354.920433][T14429] binder: 14428:14429 ioctl 40046205 0 returned -22 20:25:39 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 355.236975][T14511] IPVS: ftp: loaded support on port[0] = 21 [ 355.512610][T14511] chnl_net:caif_netlink_parms(): no params data found [ 355.592490][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.599724][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.608795][T14511] device bridge_slave_0 entered promiscuous mode [ 355.620678][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.628004][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.637198][T14511] device bridge_slave_1 entered promiscuous mode [ 355.676867][T14511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 355.691972][T14511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 355.731900][T14511] team0: Port device team_slave_0 added [ 355.743955][T14511] team0: Port device team_slave_1 added [ 356.019134][T14511] device hsr_slave_0 entered promiscuous mode [ 356.163331][T14511] device hsr_slave_1 entered promiscuous mode [ 356.451184][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.458503][T14511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.466839][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.474125][T14511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.493931][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.505604][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.621449][T14511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.648926][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.658243][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.676205][T14511] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.695065][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.704926][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.715540][ T2871] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.723138][ T2871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.773412][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.783897][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.793467][ T2871] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.800799][ T2871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.809565][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.820033][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.830636][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.841131][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.851154][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.861523][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.876758][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.886276][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.896483][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.914292][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.924309][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.940769][T14511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.993732][T14511] 8021q: adding VLAN 0 to HW filter on device batadv0 20:25:41 executing program 3: r0 = geteuid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001600)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x4000000000000005, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x10002, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000200)={r1}) bind$netlink(r2, &(0x7f00000013c0)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0xc1, 0x8, 0x7, 0x400, 0xff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05002dbd5300fddbdf2511040000"], 0x14}}, 0x0) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0}, &(0x7f0000001540)=0xc) getgroups(0x1, &(0x7f0000001d00)=[0x0]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000001d80), &(0x7f0000001dc0)=0x0, &(0x7f0000001e00)) r9 = getegid() fstat(r1, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000002000)={&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000016c0)="bddca0b5c2718b311006d158371b6ff96c8d402e586b2699da1318023f63931083f907ea8cf6bea9c249f9e05a5c49b5c6664a8de3d5ab8fd471e4e28f238cc74339c920e9643dcf4c44363f86fc0376e6b8e9722f04adf9008f0e051266e32985307850c63d8ba13b416f0ad3be4398d4c1a4a942c11f4d776e8e0031f8adfb4a2d29df3693c1334bf5f79e5679f066d9c4f61342ec7aff9433", 0x9a}, {&(0x7f0000001780)="a8b0d89d1dc04a02dce3c9bf3eaa6a7fe67f9b7baff9532cde828e1ab564a91d76eea210cdffa0eb099cc0e7a40fae75174faa31943c05abeda948e5f7f49beba4eefa69b47f8c2933deec103f5e686c07efbb1cd15ab654d3c9809179e1032d093fa09f14e9e42f6e65c0d759b03af5702ff9f0f8dbdc882212f33560dc77444e646241dd3a68816bb7748f1487254c3c24e711dd38dc4dd04bc506b2b8ffb721b84d2e717bc8214bd32def61d4712212c34956a6fa3d2c9777ead241acf4b44089", 0xc2}, {&(0x7f0000000240)="5a1a16fcce502ab72802f72b03c903b8e4028edaf03afe2f6b31ee36cbe220eba448bd", 0x23}, {&(0x7f0000001880)="10142591fd090de19356b1e639b929cde9bcdff9e3fe6c39d6296ffe126105cd2c75f099e07f3e8d0f8bc89ad0862287bf1f8d2dc88be9093118a90355e77331861d2b5078fd483ca6b4f0a3cf6f9555f770467ed02df5a3e2b2f12d59c0497b4718203415739968c5f875a2271233bf0da53430ae0eb1", 0x77}, {&(0x7f0000001900)="6f52f5d8c0148b3e72820ebc8589cca740a76f99dd90f4b3bf14e0d9e961d981b1052f3c64fce74533e2874bfd2708e587daba4cb43f8cb8e7493acd9eedd50a2f76b40c6ad329d2c8c2439bf841506779ed98293d7972395fb01784ad8125f75cbdafb8c888f0a49ae410233af5eb0c51b2863c95a96342b968658b3c87c30aa371f94d83b283f810c58d38ec92496a79871e69440ae8f4f7b4b48ad0511a5c779b4b768875111ffc65f5e67453f1c09c9e03bf5a055c3a7b0200c4a9c4bd88", 0xc0}, {&(0x7f00000019c0)="5c285dc82e2960ec0c24bdcbd6c1ecc47434ea9f151e5d4925f89369d094263690a2e04bee0e9cf8c193ce68d9c5331ad3bfdeaea88ee2ddc64b37868543777e0adbf3feb810b4162da92dbefe149c307866dacaf0e78ff8fd5e9556cc482bb10b59c4350362342c30841bf515865cf2d88449f3dbe11f86754566dc8872b00e9839c47feb2153512988babf2fc184497e8cfc4d0ad6f6cb833c9856394ca95bfde915d223735420467d9e7901d3e4e0c1abfee8cc1bdf3274857bd32674d31e3db125bdeb6806a58a724d65fbe6f14244138a653bf7c7e7", 0xd8}, {&(0x7f0000000340)="04c5339ad2f196336bbd6619c778d326f7159aa432c3605bb7bd13", 0x1b}, {&(0x7f0000001ac0)="4440764cdab39ad11085bd853d722e038eac7da18a6a69c896278d345f1897b8ef44a96f1f7fa1faeb44ffc4a61c6656068bea1bb7cde05f5d8b9c2ae7f19a64fa6af8d7d7d8951fa0ec549f426f621b535bc24e2014fea1919a128be6d83f0037db4667026983a3a9edf8f540608c4139054a476f179b466050357b8232", 0x7e}, {&(0x7f0000001b40)="67cde743df1d3c53cb62140ff79220de0b5f512a99c241574769b41bcf6103388d7b2e82b65c0992183abf8ce5b2510c094096e1bb43388ddec99237542e0aa8561f2b06022144bd93431baea32a309c8e615a012f20d27d3ddda435a2d34378475894719bfdac183c5d2dfd3b63df88d6827db2cbc3106b096dca6d7d9d75f9f91d54d3495cfa4b500051a123d3e074304cc8ff61f0307a74c876eda3fd6a8b51b7201283b7ed7b1a1f9df9ed51844b38af22f73de8e504d339f6795ba636a721e861b6034468d56eaa9890ddd80fb7ec2a94", 0xd3}], 0x9, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r2, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r1, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r7, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r2, r1, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r4, r0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r4, r0, r10}}}], 0x128}, 0x4044010) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000023c0)=""/4096, 0x1000}, 0x1ffe) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/74) 20:25:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) r1 = perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) close(r1) 20:25:41 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:41 executing program 0: clone(0x20001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e21, @loopback}}) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = accept(r2, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000080)=0x80) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xffff, 0x4) 20:25:41 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000140), 0x4) 20:25:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000100012000c0001007665746800000000180002001400012000000002995744e8c737a990373086d75de4f5ed7532f6f79bdebe8c2d9ea986ce04a36bcb939e0ebd7641de166dd84e86008248a2000278afda29b35f69a19f58dcf15936958c727744082d70494312cd31e09cab391283a36cbc7f64115ad46b63682700"/152, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x200}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 357.620645][T14678] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:41 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x220000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x9, 0x80805, 0xfff) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/216, 0xd8}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/36, 0x24}], 0x6}, 0x1) r2 = dup(r0) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc)) 20:25:41 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 357.681737][T14678] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:25:41 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$isdn(0x22, 0x3, 0x38e7bc08e89bae8c) getsockopt$sock_buf(r1, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000180)=0x837fa30a) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000080)=""/190, &(0x7f0000000000)=0xbe) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'rose0\x00', 0x400}) [ 357.846580][T14686] binder: 14684:14686 ioctl 40046205 0 returned -22 20:25:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4240, 0x0) ioctl$VT_RELDISP(r1, 0x5605) getsockopt$netlink(r0, 0x10e, 0xb, 0xfffffffffffffffe, &(0x7f0000000000)=0xffffff28) 20:25:42 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:42 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x7fffffff, 0x1, 0x4, 0x1f, 0x10001, 0xe3, 0x0, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0xfa, 0x200, 0x1, 0x4, 0x528}}, &(0x7f00000003c0)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={r2, 0x2}, 0x8) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x33, 0x0, &(0x7f0000000100)=0xfd4b) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400000000000000, 0x201) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x1, 0x400, 0xfff, 0x4, 0x4, 0xb00}}, 0x50) 20:25:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000001440)='/dev/dsp#\x00', 0x1, 0x200) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001480)={0x3, 0x8, 0x7, 0x2}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000000, 0x102) ioctl$TIOCEXCL(r1, 0x540c) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@local, @in=@broadcast}, 0x0, 0x3}, [@policy_type={0xc}]}, 0x5c}, 0x8}, 0x0) 20:25:42 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 358.337187][T14817] binder: 14816:14817 ioctl 40046205 0 returned -22 20:25:42 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='uid_map\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) 20:25:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0xfffffffffffffce7}}], 0x1, 0x40000000, 0x0) [ 358.505019][T14817] binder: 14816:14817 ioctl 40046205 0 returned -22 20:25:42 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) getsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00006ed000), &(0x7f00000001c0)=0x1) 20:25:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x8, 0x4, 0x65f7, 0xffffffffffff9d7a]}) 20:25:42 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1d00"/16]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2060c1, 0x0) syncfs(r0) 20:25:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 358.888545][T14843] binder: 14842:14843 ioctl 40046205 0 returned -22 20:25:43 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x181400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000001800)='clear_refs\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)='-0<', 0x3}], 0x1) fcntl$setflags(r2, 0x2, 0x1) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000180)={0x400000000000000, 0x0, 0x1, 0x4, 0x1a}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) 20:25:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000280)={0x0, 0x0, 0x1f, 0x6, 0x6}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000200)={r2, 0x6}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000240)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x5, 0x0, 0x7}) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000140)={0x180000000, 0xfff, [0x8, 0x6, 0x80000001, 0x2, 0x2], 0x9}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000180)={0xffffffffffff0000}) 20:25:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 359.315973][T14963] binder: 14962:14963 ioctl 40046205 0 returned -22 20:25:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xb) ioctl(r0, 0x1000008911, &(0x7f0000000080)="11dc86055e0bceec7be070") r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2e, &(0x7f0000000000), 0x20a154cc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x81, 0x0) r3 = dup3(r0, r0, 0x80000) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x7) 20:25:43 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0xffffffffffffffd1, 0xedb1, 0x27d, 0x89, 0x10000, 0x80000001, 0x10001, 0xfff, 0x1f, 0x8, 0x2, 0x800, 0x3, 0x8, 0x26, 0x5], 0x4000}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:25:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2100) setsockopt$inet_dccp_buf(r1, 0x21, 0xcf, &(0x7f0000000600)="ff3b6189fc8c05e2b496819446ea8918461aba11abeb93b928953f8e765e44fbe787fe599dc614d2841f2f4054520dd8fc9b0f9d1a1af1d945be4f449cc2fd106ec0b880af57bafbe9378551ef5ceeeec01c06f4ce22e5a586b944594254020490e73b79bb76b21966fe782f7f354be67729a6b7ccc35a37fbf18b483d1165569a68abfc9eea8cd5b218bd17f3f694dff453daff6fbeeadd58b947674466f3dc29ed3c5032da", 0xa6) write$P9_RVERSION(r1, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0xbe07, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = semget(0x1, 0x3, 0x430) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r1, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x3}}, 0x3, 0x7, 0x80000001, 0x7fff, 0x41}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000007c0)=@assoc_value={r4, 0xfffffffffffffff7}, &(0x7f0000000800)=0x8) mq_notify(r1, &(0x7f0000000380)={0x0, 0x2, 0x1, @tid=r3}) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000280)=""/97) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="02000000002648ef2d0b0000000000000000800000000001001400071b7300"], 0x28}}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200040) r6 = request_key(&(0x7f0000000440)='trusted\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='/dev/input/mice\x00', 0xffffffffffffffff) keyctl$invalidate(0x15, r6) r7 = pkey_alloc(0x0, 0x1) pkey_free(r7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x22, "a9585d73a46d6054b758485845b600d6a47b5709d5085835aecb5db0a447095fa053"}, &(0x7f0000000540)=0x2a) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r8, &(0x7f00000005c0)=0x4) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000840)={{0x33, @loopback, 0x4e20, 0x3, 'rr\x00', 0x8, 0x3, 0x44}, {@multicast1, 0x9, 0x1, 0xd80, 0xff, 0x6}}, 0x44) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x2800) getsockopt$netlink(r5, 0x10e, 0x1, &(0x7f0000000040)=""/121, &(0x7f00000000c0)=0x79) 20:25:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="20fabc54059046cc28e4e2bd73b8046c07e33fe75d6b2e0574bf6e0c536b72376b2bd5f679d15997dbf5802794cfac", 0x2f}, {&(0x7f00000000c0)="950e8dc9af9205d27fa151995948f3d5638a98cc543bfabbf4472bc6414ebf1ee2fdbcb7939c406e4b7af13c606823dfa03b09d8cf8fc466ac6e", 0x3a}, {&(0x7f0000000140)="39b183661ba0c059458549d442720b0cf113c57fee0c3380dd18ae19c976d5276e37223eac93b6b182943128d2a180bdd8a3a64fc2c59fec23410e0569888a5440bf9b8d", 0x44}, {&(0x7f00000001c0)="aa37cf3c9f856cf2bd4a74c4d42554093c98bea43a4c6f2fb6034dbdcd08c6ee48bb893fa7f1597fe1fc39fde69ef246575c989dc933cc03745ffd68d6e5b06916c1cb9388c9e3bf04f1f127ef1c8fa50c0c0443db03c42c8b5d02723ddfe14fca46ddbc4f553e30039acc9cc84850899af20fffee3d98a17fd10230dd3f64ec2e6d156b27bb05bc247f336b5b2d69313b75e65f771d61bf683f45c96a29f795d0dd01f10c9d96266ffe8399f1a10d6f39dae0d5253def61765983b1a5047e27b10770372eb934333b58", 0xca}, {&(0x7f00000002c0)="9810f43d419d27fe0e95fdaf743e539462", 0x11}, {&(0x7f0000000300)="2c1435561bd05ee3297931cde407247356728e01b7319aaa8596db238696f5a4a18d677cd777995e6844ea474787f5d3d58555cbdd8afec0eddb25b972d71d997592873709a411369cf50cc640b7753f67cbc3874ab021e8d8807492f6d9088db05c2ba8e4e13a81294fb5cdd7c65a90caebfae30180c0b662fd950033f6ec37c59ad9e556c8767742adaf23acfd4dd91a70c68f9b68dcc1da77954fa2eee0bd90196c3a08573cf92c5069cd0bd5fe8e99220cde8e091544fd74ee07b3e4bacac5a7f36da98f26ef883a021e70ba3e61f9c1e3af80559b9377e1c3804f0c3c75ae9a4fe179", 0xe5}, {0xffffffffffffffff}], 0x7) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:43 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 359.836481][T15086] binder: 15084:15086 ioctl 40046205 0 returned -22 20:25:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xaaf6aa57) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0xffffffffffffffff, 0x0, 0x2e0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='u]\x00\x00\x00']) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) 20:25:44 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 360.406617][T15200] binder: 15199:15200 ioctl 40046205 0 returned -22 20:25:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:44 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0xffffffffffffffd1, 0xedb1, 0x27d, 0x89, 0x10000, 0x80000001, 0x10001, 0xfff, 0x1f, 0x8, 0x2, 0x800, 0x3, 0x8, 0x26, 0x5], 0x4000}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:25:44 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121040, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x2, 0x1000, 0x3, 0xf60}, {0x7fff, 0x4b95, 0xc56, 0x9}, {0x7, 0x0, 0x0, 0x3}, {0xb0, 0x1, 0x8, 0x4}, {0x3, 0x80000001, 0xf80000000, 0x677b}, {0x7f, 0x80, 0x0, 0x10000}]}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:44 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x4008000141042, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) ftruncate(r0, 0x1008008) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) 20:25:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 360.864921][T15319] binder: 15318:15319 ioctl 40046205 0 returned -22 20:25:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r1 = memfd_create(&(0x7f00000001c0)='<\xd2c\x0f\x00\x00s\xf6\xc52\b\x1b@\xe1\xeeD\xb7\x85FU3\xd3\x0e \x84oD\x83\xfeV\x8c9\x1db)g\xda\xdb\x89+', 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000000001, 0x11, r1, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 20:25:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:45 executing program 2: r0 = socket(0x200000010, 0x8080f, 0x2) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000200)="8f3e0083cf57750cefce2bfb61ce001ebd50d5ad331dd8e29c382370aad3251e7c", 0x21) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="240000004a005f0214f9f407000904000a00"/36, 0x24) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20978cbd7000ffdbdf25010000000000000009410000004c00180000002f73797a310000000000000000000000000000000000008000"/98], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) 20:25:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 361.320267][T15439] binder: 15438:15439 ioctl 40046205 0 returned -22 20:25:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0xfffffffffffffe7f) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v2={0x7, 0x3, 0x1, 0x1, 0xd8, "be4d308543e7f5de6a15e7366b293a15a3b43121fb130a177a46d1c4d6853793b8573267fe9549b0bff0d4513a08833897e9dcb47e13c95375545f979bb53a113e760aec4afb02ef06ed10182c4b8e0baa2fda254c59f54f18bdae8dd16a9011f1bc55ab9b1f7e7debe4bcb08502b6baf59962aafddb20deb8733a6d573570a3a8e4d7b097046bc567d425ccf5f31b0c1ae3ae581c392caaab4624b6a9f5ac60dd68517e3ca902e24a29e46b733fb5f2813defa272c8e7908ce530d74f899bbe84a3d44a2d691054eb6511e3629fa41094f97d4be35380e8"}, 0xe2, 0x1) 20:25:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:45 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0xffffffffffffffd1, 0xedb1, 0x27d, 0x89, 0x10000, 0x80000001, 0x10001, 0xfff, 0x1f, 0x8, 0x2, 0x800, 0x3, 0x8, 0x26, 0x5], 0x4000}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:25:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:45 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6, 0x0, 0x408776f6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) gettid() ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) creat(0x0, 0x0) 20:25:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 361.903837][T15564] binder: 15563:15564 ioctl 40046205 0 returned -22 20:25:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 362.287215][T15675] binder: 15674:15675 ioctl 40046205 0 returned -22 20:25:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000001300)=""/152, 0x98}], 0x7) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:46 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1ff, 0x8203) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r1}, &(0x7f0000000540)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d58bbed86a2d3bd61e2bd751430cb458a96a06a716a20473315c275db39470597c7bbc66f04e64c5aa54ad09be3f7e5ea872f2508a8d4dc2d39d401674ebe7c60ebe4e593646", 0x46) futex(0x0, 0x8c, 0x1, 0x0, 0xfffffffffffffffe, 0x0) r2 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r2, r0, 0x0, 0x9662bb2b6ccec7db, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0xffffffffffffffab) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r3, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) write$P9_RLOCK(r4, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x3}, 0x8) getsockopt$inet6_udp_int(r4, 0x11, 0x8a5adfb97cb4fc81, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r0, 0x1f, 0x2}, 0x14) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000580)=""/93) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000440)=0xffffffffffffa55b, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x40040, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) 20:25:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:47 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:47 executing program 3: r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000a01ec319256d7604dee4010000001c9245655c449524060aefead850704e4f8abcf7a1001b4e5c4eaf17cf859354d30c07a0d6a54a6a5b", 0x3c, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) 20:25:47 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:48 executing program 3: semget$private(0x0, 0x403, 0x0) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020400) 20:25:48 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r1, &(0x7f00000001c0), 0x7) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x2, 0x0, 0x7ff, 0x3880, 0x3, 0x7ff, 0x8001, 0x100000000]}) r2 = msgget(0x3, 0x1000000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0) connect$rxrpc(r3, &(0x7f0000000540)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/53) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/203) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xc4, 0x100000000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5, 0xffffffffffffffff}, 0xfffffcd1) 20:25:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x3}}, 0x18) write$P9_RSYMLINK(r0, &(0x7f0000000300)={0x14, 0x11, 0x1, {0x4, 0x3}}, 0x14) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000340)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x24, &(0x7f00000003c0)={0x3, 0x7, 0x7, 0x100000001, r2}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000400)={0x10000, 0xa8bc}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000440)={0x1e59b111, 0x100000001, 0x400, 0x6, 0x6}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000480)={0x80000003}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)) accept4$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14, 0x80000) bind$can_raw(r0, &(0x7f0000000940)={0x1d, r3}, 0x10) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="2e1edf17028c1def07384e4fc99fb98c5fda193d1cbfc0bc27dd076571df4899323b7ef454be6f700ae325b88b3e92cfc371c434becb624572687f072d3ab529a27e50dccd856b1387b20a84c70bb90a5b2322608856d45d31075920614f2c6107cf9fb34259f46d9090766d406ae082b5ff15763dba23eae54290721d64448bcea5f89e92710c63fa94b1aa1369346cea047409874d231ba6592d5ea622a2469947275b7bed03d7e61ebe87890f941a0459ebfb6e4bb6", 0xb7}, {&(0x7f0000000ac0)="a4a5e618ea9c2da6abf00c01cd11d15c06ec778689516bca59523e1ba5122ace3accd3e02c5d1e0f55878b1eedca2f5fbf5b2042df058a6b60559c717f4281d325c85aaaaa4ada7bb6abd8ede12fe03034e5a6db3896f1f921087f546ca33a236a600c00411b0492c7403e1ef13ccd8a379c1e5fa5e716630753578244abc6c526c0a5f91943c9ffb6f67e960290ef97fa2afa38a19108840ed860307fed6b74366ba22bfc07add083b30c055c605f8e6cd285a27fe6f325475e745b2f6aa8a77179018353f466e36662fa9ff61ac55ab0bfdac28bed8f77f5dd", 0xda}], 0x2, &(0x7f0000000c00)=[@rights={{0x10}}], 0x10, 0x4000040}, 0x20040000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000c80)={0x4dd4, 0x5}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000cc0)) timer_create(0x1, &(0x7f0000000d00)={0x0, 0x26, 0x4, @tid=r2}, &(0x7f0000000d40)=0x0) timer_gettime(r4, &(0x7f0000000d80)) write$tun(r0, &(0x7f0000000dc0)={@val={0x0, 0x8afe}, @val={0x0, 0x4, 0xee, 0x7fffffff, 0x1, 0x8}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={[], 0x14}, [], {@ipv4={0x800, {{0xf, 0x4, 0x1000, 0x10001, 0xe0, 0x66, 0xc362, 0xff, 0x1d, 0x0, @multicast2, @local, {[@ssrr={0x89, 0xf, 0x9e000000000, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @multicast2]}, @ssrr={0x89, 0xf, 0x8001, [@loopback, @multicast2, @multicast2]}, @lsrr={0x83, 0x7, 0x8, [@multicast1]}]}}, @igmp={0x1e, 0xff, 0x0, @loopback, "1ce3cc394dce5ffdb7935217662b17242e5ce468824461def98fec2d6cdf53c362a61fbdc93f877f95e3ad41eb246e8a956eb4c77ad57821895348827590cafeb60e0edd46f332ab1e0890c8075661a7fdee6bb66285dbd96ab642768697a5ed8725d9e8488b17d8c9703baf4b0c4c47804e39bc1fb1423cee5621c6d28b33675f1d53cd7d6a9035c02a775fec8987065390048d64fe65458d7ccade"}}}}}}, 0xfc) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r5, 0x104, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4040000) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000001000)=0x3) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001040)={0xffffffffffffff01, 0xff}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001080)={0x0, 0x2, 0x7, 0x8000, 0x1, 0x2, 0x8, 0x877, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x200000000}}, 0xdde0, 0x4, 0x2, 0x3, 0xb286}}, &(0x7f0000001140)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001180)={r6, @in={{0x2, 0x4e22, @rand_addr=0x38}}, 0x7f, 0x400}, &(0x7f0000001240)=0x90) r7 = syz_open_procfs(r2, &(0x7f0000001280)='io\x00') r8 = geteuid() r9 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001340)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000001440)=0xe8) getgroups(0x2, &(0x7f0000001480)=[0x0, 0xee01]) getgroups(0x1, &(0x7f00000014c0)=[0xee00]) lsetxattr$system_posix_acl(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='system.posix_acl_access\x00', &(0x7f0000001500)={{}, {0x1, 0x4}, [{0x2, 0x4, r8}, {0x2, 0x2, r9}, {0x2, 0x3, r10}], {}, [{0x8, 0x1, r11}, {0x8, 0x2, r12}], {0x10, 0x4}, {0x20, 0x3}}, 0x4c, 0x2) 20:25:48 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) [ 364.265492][T15912] binder: 15911:15912 ioctl c028564e 20000040 returned -22 20:25:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:48 executing program 2: r0 = socket$inet(0x2b, 0x40000000000801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x0, 0x2, 'sed\x00', 0x0, 0x0, 0xfffffffffffffffd}, 0x2c) 20:25:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/168], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0100000000000000000000000000000000000000000000002400000000000000140100000100"/96], 0x90}, 0x0) [ 364.547955][T15982] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 20:25:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x80f, 0x7ffffe, 0x0, &(0x7f0000ffa000/0x3000)=nil}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000140)="a37fbdb0d919496901c73a134d600a7b0a0de4e7222c39dcc5a006a0604e0fdeb52706e8105c6331e9cb371e3d452042714c35a3c57ddb213d8a9933cff59bf27eb6aeb6d718789dc038f90ec05458a11e375b3e46f4187648789a4eae9809fd3e3f21", 0x63}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="3a3d2cf16d47ae8b005a7b7be8246fb927eec0cbadc95b3e2d41f2a17688c63ced5537098d05b9df53b28e5a77c0a8b9a6e15b581149684803d9609e9a8feb2827af133c0b7df39293a445906c65dd57b4e1975f57b4240f0a8e0b4e2396524f8c9d2e845f01095c54851c65eccdfa04dcbf33f4d7391f99e7b12a66062907736146b7feea9c6e839bebfa84352836af2c924f196c2c77f5d9fea18067431b59e5eafaedb823b031694444d906217e80c7c63fc9a81789560a6a6abc48a0aec2fecf4ab36f3b5bb1a577917d39a0c979fb68bbd5c394d52a834bdee1b792b71ebed2c0b5195e331180d8d2da7fdc49c6f217", 0xf2}, {&(0x7f00000003c0)="dbfd43da7df260c69433c5a8ee65a4c9797525574314df2293b422cf00de3392ce96bd6ab6828263f980d3ea11baf8eaeb0f7c819f8d27443c05a25d2bdfd03c5cfa55", 0x43}, {&(0x7f0000000440)="3c114ed8215667195566d29ec1ea2110bcdce183049e7027ae8bb916fc8fd2e3661dda62e8ad0c50abc814a4765e393cac85d39e76ae46a19880bab1e6a08293ccb9ba0dca7dd231d84d8c427aaea1f83869ee9628ccf5ef290974bf77dafdd8d0368ce56ced2dd8", 0x68}, {&(0x7f00000004c0)="64ddc4e254513d951539edc6655708a07524ff4963efc1e3dd784280c251296667641d41ad461e812fb1ca5404651fc608a175745a50633354008d7fbd137882d86cd51b89ed81ce9ddaabd29d6a0cfa866226824f3490e1059169fdda6a4d033467b92a6b6d2067743a1f2a1c786ee871060af99a7bb959cf9f0a3997e8ca4320a1", 0x82}], 0x6) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x8001, 0x400000, 0x1e6, 0x7ff, 0x2, 0x7}}, 0x50) 20:25:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000eb000000000000afb8007912a800000000008c0029ff00000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7300]}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0x5, 0x7, 0x6, 0x80000001, 0x2, 0x8}) 20:25:48 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x200301) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000140)) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 20:25:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 364.885229][T16040] sg_write: data in/out 1766398389/57 bytes for SCSI command 0x10-- guessing data in; [ 364.885229][T16040] program syz-executor.2 not setting count and/or reply_len properly [ 365.006247][T16044] binder: 16041:16044 ioctl 40046205 0 returned -22 [ 365.060836][T16051] sg_write: data in/out 1766398389/57 bytes for SCSI command 0x10-- guessing data in; [ 365.060836][T16051] program syz-executor.2 not setting count and/or reply_len properly 20:25:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x4000000}}}, 0x108) dup3(r2, r0, 0x0) 20:25:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 365.369958][T16112] IPVS: ftp: loaded support on port[0] = 21 [ 365.788901][T16112] chnl_net:caif_netlink_parms(): no params data found [ 365.869270][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.877327][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.887127][T16112] device bridge_slave_0 entered promiscuous mode [ 365.900654][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.909431][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.919102][T16112] device bridge_slave_1 entered promiscuous mode [ 365.965656][T16112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 365.985801][T16112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 366.026902][T16112] team0: Port device team_slave_0 added [ 366.039378][T16112] team0: Port device team_slave_1 added [ 366.228418][T16112] device hsr_slave_0 entered promiscuous mode [ 366.433325][T16112] device hsr_slave_1 entered promiscuous mode [ 366.723228][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.731378][T16112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.740395][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.749825][T16112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.816017][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.827944][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.908168][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.935969][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.946742][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.966321][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.990280][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.001761][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.011307][ T2871] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.019021][ T2871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.082321][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.092982][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.102191][ T2871] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.109449][ T2871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.118234][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.128723][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.139118][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.149559][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.159508][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.170072][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.180277][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.189847][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.209217][T16112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.224155][T16112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.234067][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.244010][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.253548][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.322340][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 20:25:51 executing program 4: unshare(0x20400) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x3b66, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7f, 0x0) mq_timedsend(r1, &(0x7f0000000240)="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", 0x1000, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x30000, 0x0) 20:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x42, 0x101100) ioctl$KDADDIO(r1, 0x4b34, 0x10000) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0000000042f7b60fb030186080df3dce2aeb964f35002000407d66ad7587f02d4554de82fff80000002f"]}) accept$inet(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x1f, 0xf8e, 0x4, 0x100, 0xffffffffffffffcd}, &(0x7f0000000200)=0x14) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x2ddc000000, 0xfffffffffffffff9, 0x8186}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x3ff, 0x4) 20:25:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, 0x0, 0x0) 20:25:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x5001) fcntl$setpipe(r1, 0x407, 0x1ff) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0008000000000000000000000000000a00000008000000", @ANYRES32=0x0], 0x1c}}, 0x0) 20:25:51 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8a7, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x7, &(0x7f0000000180)=[{0x2038, 0x7, 0x8001, 0x2}, {0xa4c, 0x412bc578, 0x400, 0x33c}, {0x1, 0xc31, 0x7f, 0x8000}, {0x3, 0x10001, 0x3, 0x164}, {0x7f, 0x9, 0x1, 0x1}, {0x6, 0x7ff, 0xfe0, 0x1}, {0x8001, 0x6, 0x1, 0x1}]}, 0xfe4d) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x20000000000000, 0x377) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x600080, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x121528, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000140)=0x80000001) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 367.670901][T16179] binder: 16172:16179 ioctl 40046205 0 returned -22 20:25:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0xd, &(0x7f0000002380)={r1}, &(0x7f00000023c0)=0x8) 20:25:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, 0x0, 0x0) 20:25:51 executing program 3: unshare(0x400) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x81, 0x3}, 0x2, 0xf5}) ioctl$int_in(r0, 0x5473, 0x0) 20:25:52 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') write$9p(r0, &(0x7f00000004c0)="2000e5d6c594c094fee0a66878fa41", 0xf) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="84f78cddf6b2de4c88e0f0720a4465912f84800aaf", @ANYRES16=r1, @ANYBLOB="000729bd7000ffdbdf25090000000800060004000200e000010038000400200001000a004e2000000004ff020000000000000000000000000001040000001400020002004e227f0000010000000000000000380004001400010002004e24ac1e08010000000000000000200002000a004e21000000090000000000000000000000000000000068000000100001007564703a73797a300000000038000400200001000a004e2000000005fe8000000000000000000000000000aaffffffff1400020002004e2100000009000000000000000008000300020000001c0002000800040034090000080003008000000008000100120000001c00090008000100e0ffffff080002000100000008000200070000006c0005004c000200080001001a0000000800040000010000080001001c0000000800010003000000080004000400000008000400ff07000008000400080000000800020080000000080001001300000014000200080002000300000008000200020000000800010075647000"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4010) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x200000, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x601, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfffffffffffffff9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20:25:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f000076d000/0x3000)=nil, 0x3000, 0x0, 0x5c83d, 0xffffffffffffffff, 0xffbffffffffffffc) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000df8000/0x4000)=nil, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/81, &(0x7f00000002c0)=0x51) mremap(&(0x7f0000c60000/0x9000)=nil, 0x9000, 0x4000, 0x0, &(0x7f0000fa3000/0x4000)=nil) 20:25:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, 0x0, 0x0) 20:25:52 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xf, &(0x7f0000000000)='veth1_to_bridge\x00', 0x4, 0x80000001}) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 368.235282][T16301] IPVS: length: 81 != 8 [ 368.267610][T16306] IPVS: length: 81 != 8 20:25:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)=ANY=[@ANYBLOB="28010000170007000000000000000000ac1414bb0000000000000000000000000000000000000000ac1414bb000000000000000000000000ac1e0000000000000000000000000000ac1414aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aaff01000000000000000000000000000100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001c00"/128], 0xffffffffffffffa1}, 0x8}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f00000001c0)=""/250, 0xfa}], 0x2) 20:25:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="c06764cb1c754c59b52dff8ebeb3bef99625ff86ac1f98fc91a69d305645ff33f0a8a77db74b870693e878b3cb7e0af89c4d3de9680aca86658c684ec226cdc4aff00e8011a2064dc187e7ac5c63c20625a16640301d5e06d0ae6a8432aba4cd3d94bfc8d98746d6144a29fdc7f603e02c390a5a1d3832", 0x77, r0}, 0x68) 20:25:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x33, 0x117, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x3) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = gettid() r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffff, 0x2000) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x3ff, r2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x8, 0x5}, 0x0, 0x0, &(0x7f0000000140)={0x2, 0xb, 0xf51, 0xfffffffffffffffa}, &(0x7f00000001c0)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x4}}, 0x10) 20:25:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x3, 0xdb, 0x0, 0x1, 0x0, [0x15f, 0x2e, 0x2e], 0x0, r0}, 0x3c) 20:25:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 368.880723][T16424] binder: 16423:16424 ioctl 40046205 0 returned -22 20:25:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0xfffffffffffffffd, 0x6, 0x1af, 0x202}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7d, 0x0, [0x48d, 0xfffffffffffffffe], [0xc1]}) 20:25:53 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:53 executing program 2: unshare(0x20400) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x3, 0x3, 0xe, 0x1, 0x76, "ba5c6720f4b47d5e394587ab4bc15c22667e6b5be8d263b09f726c8b6261ef1034c07035c43e9ecddc3d5c519c6947654d74887501a9b0a0b8ecb18668a628191d7892ff54616e6007cfb6ff645ba93a748b0d8dbc74563e46987bc867f40dbd12b46ddc4ccf1bde67ef20c978b9c8b11e6941fc08c8"}, 0x80, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:25:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'l\x89O\x00', 0x5}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x5266, @mcast1, 0xd8}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x0, 0x837}, &(0x7f0000000240)=0x8) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) 20:25:53 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:53 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000003480)='./file0\x00', 0x20000, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000003740)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000003700)={&(0x7f0000003540)={0x1b0, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4dea000}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x57a4eab1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x3d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x9d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffffe1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}]}, 0x1b0}}, 0x20000004) r2 = socket(0x848000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x8, 0x0, &(0x7f0000000080)=0xffffffffffffff96) 20:25:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x81, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f00000001c0)='em1/mime_type^^nodev\x00'}, 0x30) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000018c0)) process_vm_writev(r1, &(0x7f0000001700)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000001680)=""/103, 0x67}], 0x7, &(0x7f0000001880)=[{&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/63, 0x3f}], 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @sliced}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='eth0\x00'}, 0x30) ptrace$pokeuser(0x6, r3, 0x5, 0x5b5) 20:25:53 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(0x0, 0x0, 0x200) getpgid(r0) r1 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="0eba857af129589a15a6d09b2b90d3f5ca30344dc0c655e657a3aab864878f4373ac74693d6e470acf5882c42168fe824e21715205da481a8c6b8dc750f248d87ceda8e02a355dc719d0730108c846056d367ec4cfcfe95fa8a6dc5b0adab3d5003e11f4947daeedaa48e3f40b3ad11741ce1e205e53084e8f507f3c70", 0x7d}, {&(0x7f00000003c0)="c0cbc95d277352e5caccd4362279517498263fc3a060e52b82cb555ed06087fad003acc818d7049c2ad11dc877601ec30fc65c9dce08b0646036f7f598ec186f7e5f06ad574e3f7282e1b3cd296f7afc85812e98b47ac94c7aeca49f2f1089195e95e95f4010d04c5ad6dd4ebb529bcbc54418a97c6cf7cde3acc28d36809b26148f7422f0ac1a493c86b4bfb85cc9bc3245c2403db656e6aaa0a1d3da51d8fe3a8098a95e30d7e3698ef8461c8c6a2e91d7ee0d9ca2780fba884161de4d039f5153c27804b76ecb466194296b328284504f902a381e09863d9be1", 0xdb}, {&(0x7f00000004c0)="19ffb8dfb50921fcc78bbc24c8fb715d41b22d9fb7a7198df34ba3195042175a22fd9865f4ba666149a05ff8936c07a8e8713d2020556aca4f1f8a339bb6ca1c8dab6b73fa72320140fd59220044cdb5b39bda644a078858d0849e5a37e1605f075392abf4574f22a1a9dd987d76c66a83d6519c3b23ff5a583eb256641fc82730a6f2601aa5eb017f78b19cb174f4e0aac05fddc5995b9a594dc03df625967bf7339e27fd10dfc0ebb78d99e955e53d9af6c6f7ad036352011c275cf58b09d147b0b004185b7e2d475acbe52fc7a00c340bf18d0f7a99e0cfdab46c6816ac9da492551fa4bbe41475969a", 0xeb}, {&(0x7f00000005c0)="f0b4c3953dfd1e2bd197ac600fc1482655d3b0913ed6c9825490b81f2c0e360c86c5e0e32fed2c75d076e21f2e66dd2d8301a1b55fa209f4156097c2a326dd71aa16dc711f0ab7f994af7cd50bedc0e45e4f80645fe6014a8ac89269f0fe34a47e1121fae1e937ca411c61e8a3367d0b1e808bb4d9eb59de8437457acc824f431b32774822b0cb53ab577130fa5cd5ed4ac04644a21af96396513f230b878c87991a9cc8", 0xa4}], 0x4) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {r2, r3+30000000}}, 0x0) tkill(r1, 0x36) tkill(r0, 0x1000000000013) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x200) getsockopt$inet_buf(r8, 0x0, 0x24, &(0x7f0000000080)=""/215, &(0x7f0000000180)=0xd7) 20:25:53 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 369.514227][T16551] binder: 16550:16551 ioctl 40046205 0 returned -22 20:25:53 executing program 3: r0 = socket$inet(0x2, 0x80006, 0x10003) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e000000200cecd31df9cccd64779c1460100000000"], 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000200)={@multicast2, @local}, 0xc) 20:25:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) syz_extract_tcp_res(&(0x7f0000000080), 0xfffffffffffffc44, 0x0) 20:25:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'hash\x00', 0x20, 0x100000001}, 0x2f, r2) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') r4 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x10000, 0x400, 0x2c, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e21, 0x543, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}, 0x3}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x4}], 0x94) sendfile(r4, r3, 0x0, 0x5) 20:25:53 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002000004000010000000000000000000063bfcde1105e5fc31b338c4dafa5978e70000000000000000000000000000000bcb1027bc337a0162b17e1d4d1b3ef103968944ed004d1f5268f9710dada97f358c608a71d0c6c31ef696033b8539093726c7882e9931dc4679e3e2f10ae176a32b4f4f7d0298dc8dd963331836563f9f2472b2ac02dc270642ee670ca57a73d57a326c5073bc7a456bd2cce8624444bc9378817b4df0d122f3722e4d5de57be65ce8e08d0b2ee5214efba3801e46bfa55ec"]) 20:25:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x101, "e2e49efd3b59af2684384a0867f1eb82864026cbecfb600982624beea04eccae", 0x3, 0x80000001, 0x0, 0x4000, 0xc}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:25:54 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10812, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) pipe(&(0x7f0000000080)) 20:25:54 executing program 1 (fault-call:8 fault-nth:0): openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x3) r1 = pkey_alloc(0x0, 0x3) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) pkey_free(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x5, @rand_addr="a8a0d6bb3b9c60f35991b963fd9476dc"}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x322, @mcast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x400}, &(0x7f00000001c0)=0x8) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff) [ 370.314530][T16689] binder: 16687:16689 ioctl 40046205 0 returned -22 [ 370.432088][T16710] FAULT_INJECTION: forcing a failure. [ 370.432088][T16710] name failslab, interval 1, probability 0, space 0, times 1 [ 370.445131][T16710] CPU: 0 PID: 16710 Comm: syz-executor.1 Not tainted 5.2.0+ #15 [ 370.452829][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.462978][T16710] Call Trace: [ 370.466379][T16710] dump_stack+0x191/0x1f0 [ 370.470798][T16710] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 370.476781][T16710] should_fail+0xa82/0xaa0 [ 370.481303][T16710] __should_failslab+0x25f/0x280 [ 370.486592][T16710] should_failslab+0x29/0x70 [ 370.491255][T16710] kmem_cache_alloc+0xca/0xa40 [ 370.496160][T16710] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 370.502414][T16710] ? update_stack_state+0xa12/0xb40 [ 370.508597][T16710] ? dst_alloc+0x2db/0x900 [ 370.513083][T16710] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 370.519072][T16710] dst_alloc+0x2db/0x900 [ 370.523605][T16710] ip_route_output_key_hash_rcu+0x2717/0x3950 [ 370.529746][T16710] ? is_bpf_text_address+0x47d/0x4b0 [ 370.535138][T16710] ip_route_output_flow+0x1e2/0x3d0 [ 370.540434][T16710] raw_sendmsg+0x1b87/0x46d0 [ 370.545173][T16710] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 370.551144][T16710] ? compat_raw_ioctl+0x100/0x100 [ 370.556255][T16710] inet_sendmsg+0x48e/0x750 [ 370.560848][T16710] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 370.566837][T16710] ? inet_getname+0x490/0x490 [ 370.571690][T16710] ___sys_sendmsg+0xe92/0x13c0 [ 370.576532][T16710] ? fsnotify+0x563/0x2100 [ 370.581148][T16710] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 370.587309][T16710] ? __fget_light+0x6b1/0x710 [ 370.592081][T16710] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 370.598045][T16710] __se_sys_sendmsg+0x305/0x460 [ 370.602979][T16710] __x64_sys_sendmsg+0x4a/0x70 [ 370.607825][T16710] do_syscall_64+0xbc/0xf0 [ 370.612333][T16710] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 370.618284][T16710] RIP: 0033:0x459829 [ 370.622265][T16710] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.641935][T16710] RSP: 002b:00007f340ed00c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.650434][T16710] RAX: ffffffffffffffda RBX: 00007f340ed00c90 RCX: 0000000000459829 [ 370.658472][T16710] RDX: 0000000000000000 RSI: 0000000020003d00 RDI: 0000000000000004 [ 370.666593][T16710] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.674642][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f340ed016d4 [ 370.682670][T16710] R13: 00000000004c76d0 R14: 00000000004dcde0 R15: 000000000000000b 20:25:54 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfd, 0x0, &(0x7f0000000000)) 20:25:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xffffbffffffffffd) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0xffffffffffffffff, 0xff51) 20:25:54 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x400000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)='wlan1/\x00'}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0xffffffff, 0x6f1, 0x2, 0x0, 0x0, [{r0}, {r2, 0x0, 0x2}]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x134) connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x74, &(0x7f0000000140)={&(0x7f000000a000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f420f7fffffff0001580f02000000003f420f0000000000856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000002000)={0x0, 0x0, 0x2080}) 20:25:54 executing program 1 (fault-call:8 fault-nth:1): openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070e9e88f0ccf1ffaedf4f492265f4c6bdf57cb507b657d25146b022750238379a604e6793aaa82080f427bae04c3f0c548bb") r1 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2f, &(0x7f0000000000), 0x20a154cc) 20:25:55 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000), 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) [ 371.137049][T16819] FAULT_INJECTION: forcing a failure. [ 371.137049][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 371.151740][T16819] CPU: 0 PID: 16819 Comm: syz-executor.1 Not tainted 5.2.0+ #15 [ 371.159470][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.169604][T16819] Call Trace: [ 371.173001][T16819] dump_stack+0x191/0x1f0 [ 371.177437][T16819] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.183463][T16819] should_fail+0xa82/0xaa0 [ 371.187988][T16819] __should_failslab+0x25f/0x280 [ 371.193029][T16819] should_failslab+0x29/0x70 [ 371.197712][T16819] kmem_cache_alloc_node+0xf4/0xbb0 [ 371.203081][T16819] ? do_syscall_64+0xbc/0xf0 [ 371.207747][T16819] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 371.213908][T16819] ? arch_stack_walk+0x29a/0x3e0 [ 371.218917][T16819] ? __alloc_skb+0x215/0xa10 [ 371.223581][T16819] ? stack_trace_save+0x1b0/0x1b0 [ 371.228868][T16819] __alloc_skb+0x215/0xa10 [ 371.233549][T16819] ? kmsan_get_shadow_origin_ptr+0x61/0x470 [ 371.239538][T16819] __ip_append_data+0x3901/0x52c0 [ 371.244647][T16819] ? do_raw_getsockopt+0x410/0x410 [ 371.249867][T16819] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.256099][T16819] ip_append_data+0x324/0x480 [ 371.260870][T16819] ? do_raw_getsockopt+0x410/0x410 [ 371.266076][T16819] raw_sendmsg+0x2d02/0x46d0 [ 371.270837][T16819] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.276817][T16819] ? compat_raw_ioctl+0x100/0x100 [ 371.281930][T16819] inet_sendmsg+0x48e/0x750 [ 371.286532][T16819] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.292708][T16819] ? inet_getname+0x490/0x490 [ 371.297474][T16819] ___sys_sendmsg+0xe92/0x13c0 [ 371.302337][T16819] ? fsnotify+0x563/0x2100 [ 371.306865][T16819] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 371.313018][T16819] ? __fget_light+0x6b1/0x710 [ 371.317794][T16819] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.323770][T16819] __se_sys_sendmsg+0x305/0x460 [ 371.328730][T16819] __x64_sys_sendmsg+0x4a/0x70 [ 371.333579][T16819] do_syscall_64+0xbc/0xf0 [ 371.338094][T16819] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 371.344055][T16819] RIP: 0033:0x459829 [ 371.348040][T16819] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.367875][T16819] RSP: 002b:00007f340ed00c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.376369][T16819] RAX: ffffffffffffffda RBX: 00007f340ed00c90 RCX: 0000000000459829 20:25:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x20080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x181000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x1cd) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = shmget(0x2, 0x2000, 0x408, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000180)=""/125) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) 20:25:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4000000000000016, 0x1, 0x0, "616052eabcab615670171ebe6cde243bbf3da07800"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind(r1, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x5, 0x27b5, "02889f8fa49e8c104176cecbaab507320834fb88bbcd0edb1ba005d7d17fa0626d349e5a4f78f95d768ee5717cb7377f88d777c47b2f9072801e9f41acee98", 0x6}, 0x80) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="56000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000004000"/90]) [ 371.384409][T16819] RDX: 0000000000000000 RSI: 0000000020003d00 RDI: 0000000000000004 [ 371.392452][T16819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.400931][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f340ed016d4 [ 371.409048][T16819] R13: 00000000004c76d0 R14: 00000000004dcde0 R15: 000000000000000b 20:25:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x1, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="72bca2506a4ac23cf0a039ec97677cbbb1572d9ada9745d62a817e41fd6c60eb325db9584516320a7619aff686f59f", 0x2f}, {&(0x7f00000000c0)="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", 0xff}], 0x2}, 0x4000054) close(r0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x3ff, @remote, 0x1}, 0x1c) pwritev(r0, 0x0, 0x0, 0x0) 20:25:55 executing program 1 (fault-call:8 fault-nth:2): openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 371.836765][T16858] FAULT_INJECTION: forcing a failure. [ 371.836765][T16858] name failslab, interval 1, probability 0, space 0, times 0 [ 371.849647][T16858] CPU: 0 PID: 16858 Comm: syz-executor.1 Not tainted 5.2.0+ #15 [ 371.857433][T16858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.867549][T16858] Call Trace: [ 371.870931][T16858] dump_stack+0x191/0x1f0 [ 371.875344][T16858] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.881341][T16858] should_fail+0xa82/0xaa0 [ 371.885897][T16858] __should_failslab+0x25f/0x280 [ 371.890932][T16858] should_failslab+0x29/0x70 [ 371.895622][T16858] __kmalloc_node_track_caller+0x1c1/0xf10 [ 371.901547][T16858] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 371.907792][T16858] ? kmem_cache_alloc_node+0x1aa/0xbb0 [ 371.913844][T16858] ? do_syscall_64+0xbc/0xf0 [ 371.918512][T16858] ? __ip_append_data+0x3901/0x52c0 [ 371.923813][T16858] ? __ip_append_data+0x3901/0x52c0 [ 371.929097][T16858] __alloc_skb+0x306/0xa10 [ 371.933591][T16858] ? __ip_append_data+0x3901/0x52c0 [ 371.938886][T16858] __ip_append_data+0x3901/0x52c0 [ 371.943991][T16858] ? do_raw_getsockopt+0x410/0x410 [ 371.949204][T16858] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.955244][T16858] ip_append_data+0x324/0x480 [ 371.960020][T16858] ? do_raw_getsockopt+0x410/0x410 [ 371.965227][T16858] raw_sendmsg+0x2d02/0x46d0 [ 371.970116][T16858] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.976107][T16858] ? compat_raw_ioctl+0x100/0x100 [ 371.981235][T16858] inet_sendmsg+0x48e/0x750 [ 371.985859][T16858] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 371.991847][T16858] ? inet_getname+0x490/0x490 [ 371.996785][T16858] ___sys_sendmsg+0xe92/0x13c0 [ 372.001840][T16858] ? fsnotify+0x563/0x2100 [ 372.006366][T16858] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 372.012560][T16858] ? __fget_light+0x6b1/0x710 [ 372.017350][T16858] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 372.023427][T16858] __se_sys_sendmsg+0x305/0x460 [ 372.028400][T16858] __x64_sys_sendmsg+0x4a/0x70 [ 372.033255][T16858] do_syscall_64+0xbc/0xf0 [ 372.037862][T16858] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 372.043909][T16858] RIP: 0033:0x459829 [ 372.047897][T16858] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.067570][T16858] RSP: 002b:00007f340ed00c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.076152][T16858] RAX: ffffffffffffffda RBX: 00007f340ed00c90 RCX: 0000000000459829 20:25:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x10001) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/22, 0x16}], 0x1, 0x3) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000180)={0x0, 0x7fffffff, 0xffffffff, &(0x7f00000000c0)=0x9}) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 372.084194][T16858] RDX: 0000000000000000 RSI: 0000000020003d00 RDI: 0000000000000004 [ 372.092245][T16858] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.100279][T16858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f340ed016d4 [ 372.108420][T16858] R13: 00000000004c76d0 R14: 00000000004dcde0 R15: 000000000000000b 20:25:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/195, 0xc3}, {0x0}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000300)={0x8, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0x1, 0x800, 0xbd}, &(0x7f0000000440)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x4}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=""/143, 0x8f, r3}}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00', 0xff}) 20:25:56 executing program 1 (fault-call:8 fault-nth:3): openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4020000000000725c12000000000000630b0000000000009500000000000000c6e7235683c0a8feed316ac7165e6edc0bcd992a5df44b8ea9ee71f9a98735f971c81a0b368344ac039ded0d932b2f4b0716a18f8cdbd9f3f61dc870f084cafb33f2eae8cc10cf71b8ea2d15b968ee1739978c83855402c07064561da4323fe30d5dbc666f"], &(0x7f0000003ff6)='G\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x22) 20:25:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:25:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/195, 0xc3}, {0x0}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000300)={0x8, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0x1, 0x800, 0xbd}, &(0x7f0000000440)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x4}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=""/143, 0x8f, r3}}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00', 0xff}) [ 372.607402][T16963] binder: 16957:16963 ioctl 40046205 0 returned -22 20:25:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22001, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x4, 0x80000001, 0x5, 0x8, 0x4, 0x3f, 0x800, 0x5, 0x1f, 0xb821, 0x1, 0x591, 0xbaf1, 0x3, 0x2, 0xc65, 0x9, 0x8, 0x1, 0x5, 0x8001, 0x8, 0x4, 0x3, 0x80000001, 0x9, 0xffffffffffff8001, 0x9, 0x400, 0x4, 0x7fff]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ioprio_get$pid(0x1, r3) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x4e21}, 0x10) 20:25:56 executing program 4: r0 = socket(0x400000000010, 0x40000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="117bf07000000000000000117cdb38bc63a99c07027be0070012e469110007eea64d0c51a323a512a8f4814fbff248450b756d81d44b2016700f60bb120915e1e0f51aa01a0f0d29e5c3682f2a3f2d928f5dc8e825bf89e87dbfc1ffdd6e9d160bf3f60c9fcbca25ccc7f0902bca597b50c7813aa737646829eeee82a19cd06a126c70e0061efd62b87d0000000000") write(r0, &(0x7f00000001c0)="2400000019002509071c0165ff00fc020200000000100f000ee1000c0800120002000000", 0x24) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={0x0, 0x0, 0x2080}) 20:25:56 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xfefffffffffffffd, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) ioctl$KDENABIO(r1, 0x4b36) 20:25:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4ae0, 0x400000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x501040, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x40000, 0x110) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f30f001e33000f30262ef4ad66b8da0000000f23d80f21f86635c00000900f23f8f081721e750015aeea66b9420800000f32c1eb00440f20c066350c000000440f22c0", 0x43}], 0x1, 0x8, &(0x7f0000000240)=[@dstype3={0x7, 0x2}, @dstype3={0x7, 0x1}], 0x2) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x6ded275c}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000300)={r3, 0xd, 0x0, 0x10000, 0x2}, &(0x7f0000000340)=0x18) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0xc018ae85, &(0x7f0000000380)) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000540)='/dev/md0\x00', 0x484c80, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000580)) fcntl$getownex(r5, 0x10, &(0x7f00000004c0)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000500)={0x0, r7}) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, &(0x7f00000005c0)="c4c18016380f22a4653e650f01c20fa5a472158b0000f08061da40b8040000000f23d00f21f835100000030f23f866b814018ee0f30fc736c7442400f07f0000c7442402355ab692c7442406000000000f011c24260f01df", 0x58}], 0x1, 0x40, &(0x7f0000000680)=[@cr4={0x1, 0x10001}, @cr0={0x0, 0x2}], 0x2) 20:25:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x8}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x40000c0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) fcntl$setflags(r0, 0x2, 0x1) 20:25:57 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000100)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x8, 0x2, 0x7, 0x80000000, "19109e9b35a7972efb3ff02df659269e46a5736a96e750aa16c4e20d9afc203b"}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0xb) 20:25:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x100004, 0x0, 0xfffffffffffeffff}, 0x10) write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009040011000000000b0000000000000800040003000000", 0x24) [ 373.141667][T17084] binder: 17082:17084 ioctl 40046205 0 returned -22 20:25:57 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003efff0)={0x0, 0x0, 0x7}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffdb0}, 0x8, 0x0) gettid() read(r2, &(0x7f0000950000)=""/128, 0xffffff7f) 20:25:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xffffffffffffffff, 0x84e0, 0xa7, 0x813, 0x14, 0x100000000000000, 0x2, 0x8000, 0x5, 0xfff, 0x2b6, 0x401}) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='@em0selinuxproc\x00', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="1102a5055e0bcfe49f9770") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x90000, 0x0) r3 = openat(r2, &(0x7f0000000140)='\x00', 0x0, 0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x2e, 0x37, 0x1, {0x2, 0x7fffffff, 0x4, r4, 0x10, '/dev/sequencer2\x00'}}, 0x2e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @loopback, 0xdd}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x3, @empty, 0x3f}], 0x48) socket$inet_udplite(0x2, 0x2, 0x88) 20:25:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x20, 0x4) 20:25:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e00b4ec7be070") r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x13, @ipv4={[], [], @broadcast}, 0x6}, 0xfffffffffffffdef) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 20:25:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000000)=0x1) 20:25:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/24]) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000140)={0xff, @broadcast, 0x4e20, 0x4, 'lblcr\x00', 0x5, 0x0, 0x1b}, 0x2c) [ 373.666223][T17210] binder: 17209:17210 ioctl 40046205 0 returned -22 20:25:57 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x0, 0x401, 0xff, 0x1ff, 0x0, 0x9, 0x5, 0x1, 0x7f, 0x20}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) 20:25:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x63, &(0x7f0000000000)=0x43a, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000284b9fb07260260e927386f0e1e169c5ecc6b10c943c155af1ef4c5bf6fe19e9e4b9997d665fed1847740403166de3d54ca40fa2bbd3150c9f7e20c1483feac31bfe1f471242507acbb1d94c06b11cac13de2c538d3f11f64b345696d692f0a78f14fde166501da64b83face84b39a4c64e7f8389d45d2511da2dcd549cb9deeea0bc109c16a6960df5ca28297321f342c059d82b1925443470762fecb2c4cb37b055e3194fd5da94cc698841124da1a251d96a7e5b72e8366f3275ea9867dd", @ANYRES16=r2, @ANYBLOB="290600000000c308bc350fb72943f4c28d1c"], 0x18}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r1) 20:25:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x7, 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e22, @loopback}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x7ff, 0x0, 0x0, 0x8, 0x9, 0x3f7}, 0x20) getpeername$netlink(r1, &(0x7f0000000240), &(0x7f0000000300)=0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:58 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xff, @rand_addr="98a8d6f069f41cb74548f115ce07dcc5", 0xbed}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr="3c4269d7fc0527427982718de80e4dea"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff0000000000000}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x3, 0x401, @local, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x6}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) pipe2(&(0x7f0000000380), 0x800) getsockopt$inet_int(r2, 0x10d, 0x0, 0x0, &(0x7f0000350ffc)) 20:25:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x100000001, 0x200) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000014d400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:25:58 executing program 4: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x10000) 20:25:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb) clone(0xa000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) 20:25:58 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x4, 0x1, 0x7}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000069cb3647769534692ee3e3d4f800590e5d627a60969efcf16826e0e9cbbb666f0542fb1fee31a66bd08936ee9d94e2125928fed30b64179a1a4953823baad90a7a80be7834c60eca191b4ad86224d1107a16d40c08cf9b5dec97c248f596ac72057d5e6450fe3ceb83ba000000007dc5b47cfa2206f74c796f2273348531bb9c4448d516b960a981a99f27041c3aee206077bbb0882b72c036050dbcc915bcbf0c9bc1ed147265ce05f8aef60250848f099f61fa994714cd13046357d32ad9", @ANYRES16, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x4924924924927e1, 0x0) 20:25:58 executing program 4: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r2, r1) io_submit(r4, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3ab, 0x0, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xb, 0x0, r3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x0) 20:25:58 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='Xet/ip\x00') setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000140)=""/213, 0xd5}, &(0x7f00000000c0), 0x49}, 0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000dedf2f)='rw') ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x3f, 0x503, 0x1, 0x63, 0x4, 0x2}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e20, 0xfffffffffffffaea, @mcast1}, {0xa, 0x4e20, 0x0, @remote}, 0x80, [0x64794cff, 0x1, 0x8613, 0xffffffffffffffff, 0x8, 0x180000000000, 0x0, 0xa6]}, 0x5c) 20:25:58 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x7, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prctl$PR_GET_SECCOMP(0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x600, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:58 executing program 4: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r2, r1) io_submit(r4, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3ab, 0x0, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xb, 0x0, r3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x0) 20:25:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffb, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 374.986214][T17478] binder: 17475:17478 ioctl 40046205 0 returned -22 20:25:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000005000000000000000f0a0000000000009500000000000000c48c9d3c031f10d23b47dcda44b8c1bcc152d96b0bd4e8daa06a20298c41ce33a3b8fe72a6991a05e36cd2c2771c1a33078ad5"], &(0x7f0000000080)='G\bL\x00', 0x3, 0xffffff9d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x3}, 0x7cd97672aee4dfb3, 0x10, &(0x7f0000000000), 0x10}, 0x70) accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x3, &(0x7f0000000140)=@raw=[@exit, @alu={0x7, 0x9f0, 0x7, 0x1, 0x5, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x62}], &(0x7f0000000180)='GPL\x00', 0x100, 0x25, &(0x7f00000001c0)=""/37, 0x40f00, 0x2, [], r0, 0x1b, r1, 0x8, &(0x7f0000000ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0x1, 0x4, 0x3}, 0x10}, 0x70) 20:25:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x280000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100)="1041882957bd7274ee5f0357c8e82f641c378c6579b8320e77cd797c740284895c18ca8ee4ada2", &(0x7f0000000140)=""/246}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x2, 0x0, {0x2, 0x0, 0x0, 0x1e, 0xb, 0x400000000000064}}) 20:25:59 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x305) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000002c0)={0x4, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @local}}}, 0x108) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x349700, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x1267, &(0x7f0000000080)) 20:25:59 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000300)) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) getgroups(0x8, &(0x7f00000005c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0x0, 0xee00]) r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {}, [{0x2, 0x7, r0}], {0x4, 0x1}, [{0x8, 0x0, r1}, {0x8, 0x6, r2}, {0x8, 0x6, r3}, {0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x2, r6}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x1) r7 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) sendmsg$kcm(r7, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x2a4, 0x80000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x1200000, 0x9, 0x9}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x84) r3 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000100)={0xc9, 0x5, 0x2, 0x104c, 0x1ff, 0x2, 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x03\xf9&:\xf8\x00\x00\x00\x00\x00\x00\x80\x80\x00', 0x4002}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)) 20:25:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@local, @remote, 0x0, 0x1, [@remote]}, 0xd) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 20:25:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e960fc0b09df871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ff305329576914e70bfeb59800f17c97644ab8b500000000ac00"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:25:59 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x3b7, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16}]}) [ 375.606727][T17610] binder: 17609:17610 ioctl 40046205 0 returned -22 20:25:59 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000070d00"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x33e0], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 20:25:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e960fc0b09df871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ff305329576914e70bfeb59800f17c97644ab8b500000000ac00"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 375.896857][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:26:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x42021) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x250080, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000e80)="55e216ee47a03a5a5f393dfd", 0xc, 0xfffffffffffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0xd, &(0x7f0000000080)='/dev/snd/seq\x00', 0xffffffffffffffff}, 0x30) get_robust_list(r3, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f0000000200)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0x18) write$capi20_data(r0, &(0x7f0000000340)={{0x10, 0xf4f, 0xc5, 0x81, 0x1, 0x800}, 0xea, "af61a0d91a9a035f89e54dcc6c98058be54a53ee93cb5ab64d101da32cdc4e860c26602e2a00c1538e6e663cced23730ba603d0bad2e3859b7c7d9f1c575ca02cfd80e2626635b265ddebb151e4ea5e02a04f505ef44a2208c6e7c2d3371389a677ae9b5b317de6332ca14fb29dad41a906f352cc05302fd048bf1d2e2801e9ad7e83f2a95e52005a70ae6b7bd7e32722254fadb836f76d9abffb6d54396a3e93c8c17ae48702d9638a74137b19ad48aa39a80f015923ca6555d4194b1ac254f80756e2d1585849a44fc66739bae9e7824a379fb7021979e08cc3bffb28eb4d1adcb5f69e8ab49d41928"}, 0xfc) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000300)={0x21, 0x3}) write$sndseq(r1, &(0x7f0000000e50), 0xfffffe41) 20:26:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x5, 0x200) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x800) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={r3, @rand_addr, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x234}}, 0x5, 0x6, 0x7, 0x9, 0x20}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r5, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x1, 0x401, 0x3}, &(0x7f0000000200)=0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 376.009851][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:26:00 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = semget(0x3, 0x0, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) r2 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000003c0)={{0x4000, r1, r2, r3, r4, 0x22, 0x100000001}, 0x8, 0x0, 0x483b}) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x5, 0x200) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r6, 0x40046205, 0x0) 20:26:00 executing program 3: r0 = socket$inet(0x2b, 0x80005, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'tunl0\x00', 0x2}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x1c) 20:26:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000040)="ce03100001000100ff90", 0xa, 0x0, 0x0, 0x0) 20:26:00 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000180)=""/187, &(0x7f0000000040)=0xbb) [ 376.274130][T17748] binder: 17745:17748 ioctl 40046205 0 returned -22 20:26:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1c9102, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 20:26:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x10, 0x0, 0x2}}, 0x14) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcfe}, 0x0) 20:26:00 executing program 4: mlock2(&(0x7f0000914000/0x1000)=nil, 0x1000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$perf(&(0x7f0000a46000/0x4000)=nil, 0x4000, 0x0, 0x114011, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x58341b36, 0x7fff, 0x7fff, 0x100000001, 0x7, 0x3, 0x3, 0x4, 0x204, 0x40, 0x17, 0x1, 0x1, 0x38, 0x2, 0x3, 0x3, 0x9}, [{0x77ab8626fb297d22, 0x81, 0x2, 0x101, 0x6, 0x7, 0xffff, 0x1}], "24a8ce4dad474416d90ad34c672309316ab8d79e5615b3b69a36025bdaca585cea165b679a51cf0ae854d49c977e3fa45d19715e68d99fdb12f4325417c7c254e59c8503582dd8b574ac57c84ac5ecd32bce299c4e68299bb5", [[], [], [], [], [], [], []]}, 0x7d1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000840)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 20:26:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x85, &(0x7f0000000280)=[{0x0, 0xfffffffffffffe82}], 0x12be, 0x0, 0x14b}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a600000ffa84335910000003900090037000c0006000000190005001d810000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x61d7128f2fa08f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000fbdbdd2501000000000000000c41000000e6cc1a82797a30000000fc"], 0x28}}, 0x48000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x2, 0x4) 20:26:00 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000481}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa93}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44000) 20:26:00 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x800000000002, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCSBRK(r1, 0x5427) connect(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80) sendto(r0, 0x0, 0xfffffd82, 0x0, 0x0, 0xfffffffffffffd4c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x5) 20:26:00 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80102, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bridge_slave_0\x00', 0xa9}) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:26:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40102, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x29, 0x18, 0x0, 0x24da393d28ccfd00) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f00000000c0)={0x7, 0x46aa, 0x2a}) 20:26:01 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000481}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa93}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44000) 20:26:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x100) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800001400000000000000000000006a000600000000000a00030000000000003f000000000000000040030000007f000000000000000008001200000000000000000000000000000000000000000000000000000000000200ffbb00007a850000000000000000ac1414000000000000000000d900000000fe8000000000000000001000eafffffe000000000000000085a6b27cec949b1e89944398398309e13b48d4a559775bf3cdfd5a13701566fc17f0b073eb434ff9609ecc8f3e529713a3405d0969bc39f022a4e876ef090098d5ab05ab2bf049a490ee844e40368e3f8919511d8a4ade341aab1f90b5e607b513"], 0xa0}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) 20:26:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x7, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 377.252971][T17897] binder: 17895:17897 ioctl 40046205 0 returned -22 20:26:01 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000481}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa93}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44000) 20:26:01 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=r0]}, 0x7c) 20:26:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) read$FUSE(r1, &(0x7f00000012c0), 0x1000) read$FUSE(r1, &(0x7f00000002c0), 0x1000) 20:26:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x200040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x40, 0x40, 0x8, 0x3, 0x80000000, 0x101, 0x1, 0x1, 0x5, 0x8000, 0x542a, 0xee15501, 0x9, 0xfff, 0x80000001, 0xfffffffffffffffe, 0x1, 0xfffffffffffffff9, 0x10000, 0x3, 0x80000000, 0x1, 0x9, 0x2, 0x6, 0x7f, 0x8, 0x7, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x1, 0x5d]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:01 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000481}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa93}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x44000) 20:26:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x8000000000000000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) r3 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r4 = semget$private(0x0, 0x3, 0x1) semctl$SEM_INFO(r4, 0x3, 0x13, &(0x7f0000000000)=""/59) 20:26:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:26:02 executing program 2: unshare(0x2f0d4d0c3c53e726) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000002c0)="696a42945267e7aee08192526546794d5e97fff877f046d1d5aa4c6d19bbcf1cc9bcd6320e70a1c6312640c247a3e4caafe4c08ccd17acbf69391b089b636b9f01269fd7d282f5450ebe6de17c923f9836fe3cfdacd1bd259fe5ad3720e5a01b158da9ddd554422d5f5d7115d617c433257ccc70a96cf349b864636e16e6047b18cf428c5eb0f6b6cad5e34a684c700e1e24120aa77818935aea7408481212f2ddd1cab2add6e8f3c2b069eb3d6cdf7973cf6f3534debbaecaca5791b7020c0ea926003ea03d097569663bfd3f6f4f9b532a87f519f4732fb1f8b6511a84dbdbc8fcb02653c7a5ad9ec696b2c349d7c4", 0xf0, 0xfffffffffffffff8) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="81b829767a2605b6c6ef81ffb27f56db467c72f1efa3a6879f76f604ba2e5bcf3b1e62802acbd31e93d5929d30f29c46a3d6e092aecddadf644f753356250dcd4a6de4967d18d394b49f8072b3b13cde36ef2171b4f6ded2d63f6807db5d0b3d78281d25da7a8b2386f341a50e855c30f30eab185eb79736f1eab4bb961979bb57911c437710b89bbe31eecb8fc2c7c0c845e6c68fa0677eca277195fc922aa9fb44754b9fe58d08f7a3", 0xaa, 0xfffffffffffffffa) r3 = request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='posix_acl_access@\\\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r2, r3}, &(0x7f00000005c0)=""/246, 0xf6, &(0x7f0000000780)={&(0x7f00000006c0)={'wp256\x00'}, &(0x7f0000000700)="2542ac33737309043784250057d80bc600cf043c4b5e1a3c78e471dfcd10d8bb42fe6068124da715f726e60b3c5e85c18dd7197a7de68e9f8d4eddf9cc7848dea23ce1bb57a09588463358a4a920ee0da7070b2f72769a7fc22075bedb49a025", 0x60}) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r6 = dup2(r5, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x50, r6, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x900000000, 0x7}, 0x4) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0) 20:26:02 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:02 executing program 5: r0 = eventfd(0xc2) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xf, 0x80, 0x0, 0x80000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, [0x4000, 0x2, 0x1, 0x8, 0x4, 0x400, 0x7, 0x7, 0x8000, 0x0, 0x1, 0x7f, 0xd, 0x0, 0x8001]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0xa2b1, 0x80}, 0x8) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000200)={0x5, 0x6, "6ec100448e93aa1ad45c2ee69e96d3c8dd4e145a4250eba255856fdfa4bd8dad", 0x8, 0x3, 0x7fffffff, 0x3, 0x80}) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x800, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00') getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000340), 0x4) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000380)={0x1, 0x2, [{r1, 0x0, 0x100001000, 0x4000}, {r1, 0x0, 0xfffffffffffff000}]}) write$P9_RXATTRWALK(r1, &(0x7f00000003c0)={0xf, 0x1f, 0x2, 0x7fff}, 0xf) r4 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x99bb, 0x20000) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000440)={@multicast2, @dev}, &(0x7f0000000480)=0x8) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000004c0)) write$P9_RMKNOD(r4, &(0x7f0000000500)={0x14, 0x13, 0x1, {0x5, 0x1, 0x5}}, 0x14) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000540)={0x326, "929c74a7f41ed540f6d6b42b758f0e0a6e3ef716a5fedcb37f1b4b60e9803e66", 0x102, 0x80, 0x1, 0x2, 0x1}) rename(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000640)={0x59, 0x1, 0x2, "70cfd136f46d8131ec9953541687b9838fffafc4bac8a729ada44f28d1fe41ce80f51b9034c72c9fcdb9bb0f026319c9ae70e7fb11ca5692aa2369d06af7725e674aabfa0e4f396da1b73fcf1fe5ff50dffada9efcee276741"}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000006c0)={r2, 0x40}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000700)={'IDLETIMER\x00'}, &(0x7f0000000740)=0x1e) move_mount(r1, &(0x7f0000000780)='./file0\x00', r1, &(0x7f00000007c0)='./file0\x00', 0x12) ioctl$NBD_DISCONNECT(r3, 0xab08) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000840)={r2, 0xcc, "14c6278f53e3221674e9b33c526ec96daaa988410b82d9def059819170afb31aaaaf0ae0088134e8ce812d19142caa8577b426a4359d862b166252249307e16cc37bad0d213c7c74b41373852c4ab189c1b1848ce8037aeb0a519b68d0826c1c31649c13c5e0eb511a3f3786cd6a32fdd6094c7aef2ec764d28296504fa2fb5ee02eb6d5cc990df3db2b47df6e2ce44e24c84c1f90ebc1590d869fb4e88ca967042d805714c18eebc79a0c99a1226c60a247131d6ea3a73e680e0b9b3bc94eda37007b846092fd90bff01f14"}, &(0x7f0000000940)=0xd4) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000980)={{0x32, @multicast2, 0x4e24, 0x4, 'fo\x00', 0x0, 0x1, 0x27}, {@broadcast, 0x4e23, 0x4, 0x7ff, 0x6, 0x7}}, 0x44) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000a00)={0x999, {{0xa, 0x4e20, 0x4, @loopback, 0x5}}, {{0xa, 0x4e24, 0x400, @mcast1, 0x9}}}, 0x108) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x4800) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000b80)={0x3ff, {{0x2, 0x4e21, @rand_addr=0x5}}, 0x1, 0x4, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}}]}, 0x290) 20:26:02 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 20:26:02 executing program 4: 20:26:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x29, "7e9be8b2dc1ea52b1dbe87d876f6d38d202f85a3ddb365470f7bbf7bef6d886a025eb5ea12eb1465d2"}, &(0x7f0000000040)=0x31) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r2, 0x4, 0x2, [0x2, 0x4]}, &(0x7f00000000c0)=0xc) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:26:02 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r6 = getgid() r7 = getgid() getresgid(&(0x7f0000000340), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000640)={0x7, {0x4, 0x0, 0xffff, 0x7}, {0xefa, 0x1, 0xd26, 0x8}, {0x8, 0x4}}) r9 = getegid() lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r4}], {}, [{0x8, 0x1, r5}, {0x8, 0x2, r6}, {0x8, 0x5, r7}, {0x8, 0x3, r8}, {0x8, 0x4, r9}, {0x8, 0x4, r10}], {0x10, 0x2}, {0x20, 0x6}}, 0x5c, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:02 executing program 4: 20:26:02 executing program 2: 20:26:02 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) 20:26:02 executing program 4: 20:26:02 executing program 2: 20:26:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x6, 0x2b71, 0x1, 0x9}, &(0x7f0000000080)=0x98) write$UHID_CREATE2(r2, &(0x7f0000000580)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0xf0, 0x3, 0x2, 0x40, 0x1800000, 0x984f, "f899ac1b668b5fc2f3b42805486900f7196151a5a82068dbb52663697e53d06dbe848b4111d53cca57248189fc874d5faa65d5800739d539f45fcac721bd6d4ac8bac45862431bc2b962242e59e6a24f461a4201aa49e0d75a7f8d68f61c02f0945f8b4f660609314e78203181139b3ae2da562ade520a5d4cd838f50cc59f7eabd09f8366cb488284b236402ac08eef2e0354cc1eb999b8d28cb63dcdba2be1686d240ce0d174aad9d30b0ee0e87b30d3d8b6a646ab66d3a8d920b16a36e936ebd6ba31c857ca5093a220cdfa069be483e376cf1967553aaffb099bd0e4eccf5cec728e0c3e88a0b0ba44d528eae195"}, 0x208) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r3, 0x1}, &(0x7f0000000340)=0x8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r4 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000540)={0x1, [0x0]}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:02 executing program 4: [ 379.336109][T18287] IPVS: ftp: loaded support on port[0] = 21 [ 379.451563][T18287] chnl_net:caif_netlink_parms(): no params data found [ 379.495447][T18287] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.502915][T18287] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.511233][T18287] device bridge_slave_0 entered promiscuous mode [ 379.521826][T18287] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.529132][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.538229][T18287] device bridge_slave_1 entered promiscuous mode [ 379.565559][T18287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 379.578229][T18287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 379.605699][T18287] team0: Port device team_slave_0 added [ 379.615594][T18287] team0: Port device team_slave_1 added [ 379.677735][T18287] device hsr_slave_0 entered promiscuous mode [ 379.733478][T18287] device hsr_slave_1 entered promiscuous mode [ 379.820503][T18287] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.827818][T18287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.836097][T18287] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.843369][T18287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.929141][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.952227][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.964247][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.976917][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.986844][T13106] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 380.006035][T18287] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.021335][ T2871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.030737][ T2871] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.038086][ T2871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.057395][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.067295][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.074877][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.107087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.118921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.136463][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.154385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.170099][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.185862][T18287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.223110][T18287] 8021q: adding VLAN 0 to HW filter on device batadv0 20:26:04 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/212, 0xd4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/234, 0xea}], 0x1}}], 0x2, 0x10003, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0xfd5b}], 0x1) 20:26:04 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xf1, &(0x7f0000000440)="b7d488ca93f41429ed6c5ba9fb8e516ca3c65e523c052ca8e36cb1e00300761c20ca54524492b94cf3da6d72bb4fa85c966fbec41942840439fe0781e98398f020d9da5c4b9a3039afe5f518301f1385077c3adcb24adcd6b77213f40ad95119db4f2f40ee9ced455cd14fb677441920905d6ae1b22c37d47fe9fdeb6feb8105f3285c31e1b80be0c0b989a1d0b0b026c70604cd9c22b5fb5b993be4620e889413e5863d8985055de7f23d796b485c2c52cb3458292f78ea036a8988d185") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:26:04 executing program 2: 20:26:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 20:26:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1013202, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:26:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:04 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) [ 380.431960][T18296] binder: 18295:18296 ioctl 40046205 0 returned -22 20:26:04 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210200, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)="b28528a8ad4f635c75d9d9157f45abe60512074e732ef546f61700543989f743b6a6a8f0809c500cb0c813d9b5d5a8d7ea5033a728e30f6bca1ce012ac7d6f1d6f37d4fd74f4daceb76a3bd54055a9553417953c1740b126c450610173eb354329dcdbae9fd4ced44ca7ea7794ec15253f8292c95e6ef1dd9c45956109ca67a3b9b074009a1968f7", {0x7ff, 0x2, 0x7f7f7f7f, 0x7, 0xfffffffffffff001, 0x80000001}}) timer_create(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1a4, r1, 0xc20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_LINK={0xf0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7cac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x23c1c2e8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f89}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x900, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xacb5) 20:26:04 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:26:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) 20:26:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 20:26:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x200000000081, 0x0, 0x1eb9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 380.829176][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.837589][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.845278][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.853009][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.860666][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.868756][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.876634][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.884326][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.892135][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.899895][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 380.907611][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:26:05 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 20:26:05 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000003c0)={0x6, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:26:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000005) dup3(r2, r0, 0x0) write$ppp(r0, 0x0, 0x0) 20:26:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) [ 381.337025][T18439] binder: 18438:18439 ioctl 40046205 0 returned -22 20:26:05 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 381.438652][ T12] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 20:26:05 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280)={0xc}, 0xacb5) 20:26:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x900, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 381.636111][T18433] kvm [18432]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 381.740975][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.748833][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.756516][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.764253][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.771856][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.780287][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:26:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:26:05 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00\xe1N\xf7\xbc`\x94\x84\x81\x0fgg-R\x0f\x1bq\xf0x\xbc\tV\xbb$\xd4\x86H~\x1ar3\x06:\x80\xd9\xab\x86J\xcc\x95\xbe\x1b\xf7sw\xd4R\xaf$\x95\x01\xaa\xfe\xd2\xc9E\x8f\x87\x9c\r\x93\x90\xd6\xab\xe2\x05\xef72\xcd\xa9\xc2\x1a\x85\x8a\\u\x98nW@-\rI\b]#[\xb0;\"qJ3}0*\x85Z\xe57)\xeeEL') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 20:26:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x3fffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x200c80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="05000500820f72355fdd211b634e"], &(0x7f0000000280)=0x12) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r2, 0x10000, 0x9, [0x401, 0x7fffffff, 0x476, 0x400, 0xf37, 0x4, 0x2, 0x2, 0x81]}, &(0x7f0000000380)=0x1a) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc000, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="4fb4fb0e7bb45340124f3f555ae6174f42688d0651b6454d319e324827a990bc3508e7c22a2531073f4e3aa3278f24d6bc5f1c25a6a1521bf89464258658f2e8ecb9911cdfb3e2dddadbca34335c130193972d8906b8ee26981c6a6b1d586678d90c2046b3a25ddbaf936bc1964e8f7fc0c3a931161b9a22d7c191a88325d68cdcd993a2e9ca5d7f6b315063e493a42221e67b79a3da5dec44619677bdbc5d96edb5cb2f4bdb5138258b46ae1362e5d90cdea6b539890e6c56dac2065ab0c9a95e36d107b823f768c75b7a867bb947e55b0a40fcac5c2627b3bdeffb52091bdb6035b61f") [ 381.787975][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.795582][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.803236][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.810796][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.818455][ T12] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:26:06 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 382.066847][ T12] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 382.105281][T18572] binder: 18570:18572 ioctl 40046205 0 returned -22 20:26:06 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0xfc7e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad66b6b3041afbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r3, 0x0, 0x80000300, 0x0) 20:26:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xfffffffffffffffb, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0xc0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) setpgid(r1, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:06 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2000000000000039, &(0x7f0000000140)=[&(0x7f0000002000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil], &(0x7f0000000040)=[0x1, 0x1], &(0x7f0000000180), 0x0) r0 = memfd_create(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@bridge_delneigh={0x24, 0x1d, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe}, [@NDA_SRC_VNI={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x8002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000440)={0x2, 0x1, 0x6, 'queue1\x00', 0x7fff}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000840)={0x2f9, 0x1, 0x0, [{0x4, 0x1, 0x0, 0x5, 0x1, 0x9, 0x6}]}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$sndseq(r0, &(0x7f0000000900)=[{0xffffffffffffffa3, 0xff800, 0x8, 0x8001, @time, {0x75cff75b, 0xda}, {}, @note={0x7fff, 0x5, 0x0, 0x1f, 0x8}}], 0x1c) 20:26:06 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:26:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0xdf6222d6836dde26, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 20:26:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x800) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x8000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x3, 0xffffffff, 0x40, 0x2, 0x8, 0x4000000000}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 20:26:06 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:26:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xb0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004L:\f\xad[\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 20:26:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 383.119253][T18798] input: syz1 as /devices/virtual/input/input7 20:26:07 executing program 5: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(0x0, 0x3000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x1c9c380}}, 0x0) rt_sigqueueinfo(r0, 0x15, &(0x7f0000005080)) 20:26:07 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000000)={{0x4, @addr=0x2}, "c0d797b3d24e67412324c279ceaf1d420c2bb23b6cd70412360c5b6e42c17905", 0x2}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:26:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpercpu\x00', 0x26e1, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 383.307730][T18820] input: syz1 as /devices/virtual/input/input8 20:26:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:26:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0xdf6222d6836dde26, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 20:26:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 20:26:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5bf1a0848215ab41) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:07 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x1) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x3}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x15, 0x7f, 0x0, 0x8}) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) 20:26:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 383.956593][T18955] binder: 18953:18955 ioctl 40046205 0 returned -22 20:26:08 executing program 2: unshare(0x8000000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/170) 20:26:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) getsockname(r0, 0x0, &(0x7f0000001980)) 20:26:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4) 20:26:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0x8004ae98, 0x70e000) 20:26:08 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210200, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)="b28528a8ad4f635c75d9d9157f45abe60512074e732ef546f61700543989f743b6a6a8f0809c500cb0c813d9b5d5a8d7ea5033a728e30f6bca1ce012ac7d6f1d6f37d4fd74f4daceb76a3bd54055a9553417953c1740b126c450610173eb354329dcdbae9fd4ced44ca7ea7794ec15253f8292c95e6ef1dd9c45956109ca67a3b9b074009a1968f7a5a68471d13218b66aa93af312854b39291f346927eea8f5b038fcfab642d4d79abfe40a824e49dfe437b4cbf2", {0x7ff, 0x2, 0x7f7f7f7f, 0x0, 0xfffffffffffff001, 0x80000001, 0x0, 0x7}}) timer_create(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1a4, r1, 0xc20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_LINK={0xf0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7cac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x23c1c2e8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x900, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xacb5) 20:26:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000040)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:08 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x84, "b12823b1d838aec798418ca1883973127147ecaa0703e011a1d1cda1b9f0061e0858c7a70506a3ae1ea3979d28634f48440f0629faeb85ed4eaefc729652ae7967fbdcea405b3b80e96e4b80110524fd3a245926521d38c9ec6e37d72fabc96d6ed3bc70558c8b75d701ddf74d705859b7b7b692026e4558f5a6e5f4ff29593ea7078a8a"}, &(0x7f0000000140)=0x8c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @local}}, 0x1f, 0x7}, &(0x7f0000000240)=0x90) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 384.573685][T19084] binder: 19082:19084 ioctl 40046205 0 returned -22 [ 384.628456][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.636253][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.643904][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.651487][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.661424][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.669112][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 20:26:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000180)="47fda5c7fe755980618b5e44e54e184acd7352edff013e5431ea757bf581d7963d415870ba9b47ab598679e5b35f3303069954a5631f7e8b62f75a1bffd54b61038110e01399f4fc3940fcbc79df813cfdd78ce50b84c4ea47eb165e1247d6c1c451e1f74372298c34afa5f29adb9676c35c91ec07a909e51517edee8bb3e87500f464aedfaa7946354c1b1738cbc556aa61e0312f9fcb6dbd7e0389", 0x9c}, {&(0x7f0000000300)="597b502f11539d9f0256206b4e7d236765acc7e518f4c36637597b8ae2c01d1345de04f35d69a82ed5078b6636d412667d06d44eeea250ec2f62f1884c5101860ee411cf54845adcf8be1a894ff39f432f", 0x51}, {&(0x7f0000000080)="93ae0d778fbd", 0x6}, {&(0x7f0000000480)="380ae0ba5c35a919cd55e3669616af9b08e3e43b65b99ea6189167f3915cb8aa2d30c4d9185515d56ecf5d3711abcb531f2cf2e392096d0ca0787ead03e5e8eb54694321007b4a83d0b0dd4b853d39cc844da528d64a6cea00b12129309fd4407777d4bc98de11eea4b4e50fdc5c144fb325d1e1d90a4bed4ebfc85b38fba96b6dcb54788e9c0485892a9edc", 0x8c}, {&(0x7f0000000540)="4e8e13e45f78011f8272080b039caa1a94c5ccef7c3125367bbf2d10fc52533a800f462c826d778e06565deed8d92f52f1aa45eabb5bc8eaa1537dec0b963bc8b52a8562c3", 0x45}, {&(0x7f00000005c0)="bd4181f8dee84229266296a56f82f23f22346af12ab6e38baa53713c0bcc39f242604f4d60d1ff84e1e9cc0d4321006a46fd2e20fbf01c750227151e949211862b9f9b9d193d8d20db2a9bd6725fb627c7f4c7cfbd63235d1fcb50709965aeff74c63a6973f52887f04c851cc413bc2f80621f7c7b565d1c933e9b79a69c65e817b6ec92faa3ce7e81481eeaec257b116b605a3183b48fe4ba8e8fc2a230eacb10efe30816f951d70ad18bbc0e22327a0589956a21e2b1e15dcaa0cf5a11e24167a507b500d38e6d4424d975e7e188e1321c67054444986793744708ec54be0a42ff841757e768b24cc7e608f0d34e6fd17980ea22887e21ed", 0xf9}, {&(0x7f00000006c0)="ae17edb5f14a5c6201238429546913fa63b73914d968bbc72d2a045a62f228ed4fd062246ec200d7afa9ba6ca3b5a5cbb85cfb4a46dfff52a4813d4e02045132b90a07195e0a64657a767aff361f3a5afd99866fefd3cd70a4a4a4c3f4ee9019dd46ada4c917e1f731afec6fae20525f54ab340384cea233288d7f787a8f8fb5913e1950dd8ddaae3ae19cea559d1e56d5dc467fb56d9a522910526a86642c5a4fa6c42229fcc74ec3df6d3911eb5269daf845c03ae04c1b1ac1c4a4", 0xbc}, {&(0x7f0000000780)="6f4e18903f1a7e07436e07ca9d36c70ec1cfd65b66121882523a3d0d5bf192c9014c324e73e2e33d9036e418d8de0b4903a1ca65acaff6e493f4b3fcb8667299c7e2fb1f3cbd9142dc221e32e98fb822b84a4a1c723f1ce939965369d2b8684d737264d6bc87e174bf63d745991f2fe1a41e7507dee49cd2fc2a02e33b7beae127382fea02a1a3ced82bd4d32ff847ef0c8e82f4a96cdcf770fcb53e3029bb82fd2f639344b171ccab59e7ceca268b93009bd086d0d934090cae153a97c31f5d5d2b8e", 0xc3}, {&(0x7f0000000880)="d41c030528126061479dd2d792a9604e0caed59e57579e116abcb3e9e762711f500ab390b6312e95223b9eb906cd8b17f1cc85b1e63c8d05625beccf89f8ba87754ac0104249b5f07c5287820a4710a13afb839acc245ddbd140b55e35bf731cffab7d", 0x63}, {&(0x7f0000000900)="8ea3107db627c743b9d33c15c045c5c8d2666ecdeb348c96769b93fffb8c458b0689f12ea8ea147524c653fc64bed4ff90b42f877dca2d8c841846d1ea0d24c0aef792de3554fb4608d8eee6b803fc3fd80d6738cdf9dc7f4add68b429e493b4300362f2d2fa879ebc7c218df061aaf6c0fc39039e247b38e6f4c93ff99380df93993db5e5b569776cac6c38f9d65d4131bd4f78e3d1fef4f592da0cb8b56881de4c68ea15b927d8e4576327c08442761465b37957dcdeab086bb2", 0xbb}], 0xa, 0x0, 0x0, 0x4008011}, 0x40000c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 384.676727][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.684323][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.691873][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.699498][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.707177][ T2871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 384.723221][ T2871] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 20:26:08 executing program 2: rmdir(0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r0, r1, &(0x7f00000000c0)=0x97, 0x8) 20:26:08 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYPTR64], 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad66b6b3041afbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 20:26:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:09 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210200, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)="b28528a8ad4f635c75d9d9157f45abe60512074e732ef546f61700543989f743b6a6a8f0809c500cb0c813d9b5d5a8d7ea5033a728e30f6bca1ce012ac7d6f1d6f37d4fd74f4daceb76a3bd54055a9553417953c1740b126c450610173eb354329dcdbae9fd4ced44ca7ea7794ec15253f8292c95e6ef1dd9c45956109ca67a3b9b074009a1968f7a5a68471d13218b66aa93af312854b39291f346927eea8f5b038fcfab642d4d79abfe40a824e49dfe437b4cbf2", {0x7ff, 0x2, 0x7f7f7f7f, 0x0, 0xfffffffffffff001, 0x80000001, 0x0, 0x7}}) timer_create(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1a4, r1, 0xc20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_LINK={0xf0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7cac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x23c1c2e8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x900, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xacb5) 20:26:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x110, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaa7a}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x2400c041}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000180)=""/234, &(0x7f0000000000)=0xea) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x44) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 384.979203][T19140] mmap: syz-executor.2 (19140) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:26:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 385.276585][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.284946][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.293237][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.301607][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.309333][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.317763][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 20:26:09 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1f, 0x7, 0x3ff, 0xffffffffffff7fff, 0xffffffff}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x1}, &(0x7f00000001c0)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000200)=r3, 0x4) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xbf7c, 0x1}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x1f, "32cff30c33d306c4d6c7f6a137376b824de0f5fb44158d0b3ecb2e5f52d16c7c", 0x3, 0x9, 0x0, 0xff00e8, 0x6}) [ 385.325582][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.333340][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.341519][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.349749][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 385.357757][ T3331] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 20:26:09 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000500)) 20:26:09 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8d071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) [ 385.603831][T19233] binder: 19232:19233 ioctl 40046205 0 returned -22 20:26:09 executing program 2: 20:26:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 385.787168][ T3331] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 20:26:10 executing program 2: 20:26:10 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x400, 0x8, 0x100}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="2e000000d525c240bd88ee68e8d50cd14414e9433e8ab04922bc850e2347b5009cbb7b75c406bed4c710fa0cab4b29d91c052f9910f504c8986ced74d823ba42468ebbc970c9a75fbb008aaae460a69c15159dfd8b196da85ff4e38212b77be1235bb6efbe1ee3befe26fe5e944c6175fc0b6f78d857bcf02a93f7d6dd61ca5ed765baff944e8082f5216f14171ad2537966b2f0107455cf853930e72278685ba2749ca1e4499213aa70fa8156465bc0869ac11604e5942ea147548d7dc01bfa478055d814c5ef5bfdc9"], &(0x7f0000000180)=0x36) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:10 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210200, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)="b28528a8ad4f635c75d9d9157f45abe60512074e732ef546f61700543989f743b6a6a8f0809c500cb0c813d9b5d5a8d7ea5033a728e30f6bca1ce012ac7d6f1d6f37d4fd74f4daceb76a3bd54055a9553417953c1740b126c450610173eb354329dcdbae9fd4ced44ca7ea7794ec15253f8292c95e6ef1dd9c45956109ca67a3b9b074009a1968f7a5a68471d13218b66aa93af312854b39291f346927eea8", {0x7ff, 0x2, 0x7f7f7f7f, 0x7, 0xfffffffffffff001, 0x80000001}}) timer_create(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1a4, r1, 0xc20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_LINK={0xf0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7cac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x23c1c2e8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f89}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x900, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000280), 0xacb5) 20:26:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:26:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8c90000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952", 0x2a}], 0x1) [ 386.242159][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.250058][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.259329][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.267039][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.274699][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.282387][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.290046][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.297731][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.305349][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.312994][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.320896][ T12] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 386.386124][T19361] binder: 19355:19361 ioctl 40046205 0 returned -22 [ 386.448599][ T12] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 20:26:10 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) r2 = msgget(0x0, 0x20) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000040)=""/48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) 20:26:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\x00'}, 0x0, 0x0, 0x1) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f00000004c0)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 20:26:10 executing program 5: 20:26:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x12, 0x4) 20:26:10 executing program 2: 20:26:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mv\xe5\xfc\xae\x80\x15lRl\x03\x05\xbf\xc8', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x3}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000480)={r3, 0xc2, "ebd0b4b6f230360d2153a39117ae111866133e91a2f790ccfb0a6180d0ab8f8c12016e3a5dcb7e115227eb6591d35d9f8dda365f0a6d59a031e815a5974455792fc0c5028bc800de93c50d2ed0fb10ea087327aeab642c9bae583d32d52caf3bea0b7c8a5d74c03c62723cb3ef98f542aefe0a164c64d0d3a66450918ccb62535efc20de7795ff2a9851b9e47bc69b0b8a044f8743ceb72fb580dfb4e9b5f651d50c1a329f80a978ea1f2b454d1382f6e4037abfb3a9b8e7f5d3d49e80a98279f52e"}, &(0x7f00000001c0)=0xca) r5 = getpgrp(0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f0000000300)={r1, r2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x44) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r4, 0x6, 0x1ff}, 0x8) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:11 executing program 5: 20:26:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$inet(0x2, 0xf, 0x2) 20:26:11 executing program 2: 20:26:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:11 executing program 5: [ 387.297204][T19503] binder: 19499:19503 ioctl 40046205 0 returned -22 20:26:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:11 executing program 4: 20:26:11 executing program 2: 20:26:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:11 executing program 5: 20:26:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x400000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 20:26:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0xfffffea9, 0xf401}, 0x0) 20:26:11 executing program 4: 20:26:11 executing program 2: 20:26:11 executing program 5: 20:26:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:12 executing program 4: 20:26:12 executing program 2: 20:26:12 executing program 5: 20:26:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 20:26:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x6000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) 20:26:12 executing program 4: 20:26:12 executing program 2: 20:26:12 executing program 5: 20:26:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 388.525719][T19763] binder: 19761:19763 ioctl 40046205 0 returned -22 20:26:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='hfs\x00', 0x20000, &(0x7f0000000480)='cpuset\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/22) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x48, 0x10, 0x5, 0x3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) time(&(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:12 executing program 2: 20:26:12 executing program 4: 20:26:12 executing program 5: 20:26:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:13 executing program 5: 20:26:13 executing program 4: 20:26:13 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/97, 0x61, 0x40, &(0x7f0000000080)=@nl=@unspec, 0x80) alarm(0x9) 20:26:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000040), 0x0, 0x40012003, &(0x7f0000000080)={0xa, 0x4e22, 0x8001, @loopback, 0x3ff}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:13 executing program 2: 20:26:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:13 executing program 5: 20:26:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x15, 0x0, 0x233) [ 389.297129][T19896] binder: 19893:19896 ioctl 40046205 0 returned -22 20:26:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x6, 0x0, 0x374) 20:26:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d6"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) 20:26:13 executing program 4: 20:26:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x25003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x100031, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x200000004) 20:26:13 executing program 5: 20:26:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d6"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x240, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000) 20:26:14 executing program 4: clock_gettime(0x0, &(0x7f0000000240)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:26:14 executing program 5: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f9ffffffff000000000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) [ 390.151426][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.161469][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d6"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:14 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="d43073307aff50e12916a74377a6de4904d99da91910dbe7a45063974ddff70a72b2cd9008b9fe2057c056149e4e4296b8638fb7d11b8a19a682c0718af53cd658f6776cc2110f863df501925242b0", 0x4f}, {&(0x7f0000000180)="37f2b363fa96ad3b2a6dc93c12751de96bb336816ba9610357619847e88445fbb09535c788c4e26663cf1cb1f71af4d08863e3f40df2f41cb8eb9823b4d91f841e57ad564ad6e36e099afe405896fd27ff040015d8b4c71718db8e232b7d18d11ec863b2335d49851806ce7ff7f70262f66e8347d1e6517e09016c040636927448d042d4fc4548f34dbb871273bc4c808948e02bcdabfcec5ea0cd0622dfe7fec0ba4d0dbc67ccdd04f79e9b7b6363d798124c", 0xb3}, {&(0x7f0000000480)="dd9c8037b9f09138554cf98c3abad0e7a30063f850993740ac33937bd22d9e8cadc0d062b7dbd9fa2e3d91584fd64c017bbda0792022332897a1c06dfe8dea52b3b0728475cf5b14a9588960170cf6d0b350ace26e0f7e897ec4083a9fcb0d3a0f3c14e2b6274b98a70099e77f81ac7cc48b952819d18a8ad79a5b906c5fd51542a5f34df5a6a51dbeb92d49e1dd669fa02871dabddf3c68e67ae6c86cc73deaf5c633f725308f8ad2fbdca0bbbfc0e5ba53a3459173e77db5c3e7ba0bda8117ca349d503f36c90f97707217dcf5916b25", 0xd1}, {&(0x7f0000000080)="df28a29f23b44565705d2dcc7b0abf6bf0536b60f474ab1836fdb55b265e699ed359276ca7642f", 0x27}], 0x4) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) [ 390.252122][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.288378][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.341691][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:14 executing program 2: clock_gettime(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000100)) getpgrp(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 390.405495][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) [ 390.451302][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.479818][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.542310][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000000)='./file0\x00', 0x100) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 20:26:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeb"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:14 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 390.602905][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeb"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x6, 0x0, 0x0) 20:26:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000001c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88f41f9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91", 0x20000228, 0xf401, 0x0, 0x0) [ 390.821954][T20175] binder: 20171:20175 ioctl 40046205 0 returned -22 20:26:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:17 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="9f680bca8d20037a458e738a926336820b6804e48ca9dd4437abda8d76ec473c7fd91e2f441c88045f67ed1fe65b9424884d5983621b6e224b7bb3b18a73d462c1ae31bd4a7490a2a17ea1033d1a9f33765b6842ee67512cacf7797b9802167e42327d", 0x63, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0) keyctl$link(0x8, r2, r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000440)=""/147) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:17 executing program 2: clock_gettime(0x0, &(0x7f0000000240)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000100)) getpgrp(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 20:26:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1a, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeb"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="81b2f868d9460375c230b6a006093bf9052bc434340d2d83ab7fff7e03d09bccce1f74a5ecb60460061d46012b753e909545f3454c3f2d89e7fc86cec308a92c1d6c29e6aeaf87fff1bdefb9c9983347f55146083f18f0cc27803bfeaf605f85", 0x60}, {&(0x7f00000000c0)="5b9e7d8be5c9483fec759b2a46390c5caaff21f0960618c42d29afd3a30f69d3bf24da28eeab30aaaab08bc6153d5324304acc9e", 0x34}, {&(0x7f0000000140)="b7ec2c6e7bbe36603a7a442377f1f7a79ca23f411aa54f13a22b977d8c080dbafe2c9f54924445af60202c70b71de7394718c2d5a0d6929ace4558509cdf1be9f186e018bd4068c749b5f0d696b0", 0x4e}, {&(0x7f00000001c0)="c1227ed3654e5bfbee678bce5d23eaaef632b55f0766b3661fe724614751435ff8cab4d262574731bd18377b34d86a23a12f2939efa1ac2253c56a5c2e1f9065f7663f55f7a697d276dfb9dac5b0bea599155b50dc0fe4d333a9637f001090082cd22f8f160ff839311ef41165e42547e2a85c06a595a726d029cc04f414dff6a189da9c81880f368e0b684a3a2d651c827061f02f8a18f0f60d5c18dc9d7f81d2da5335372b6a7dda76d490c5541d22ac", 0xb1}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x100, 0x20000840}, 0x800) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x11) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x94, r2, 0x105, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) 20:26:17 executing program 4: socket(0x1, 0x0, 0xfffffffffffffffd) 20:26:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) [ 393.906974][T20304] binder: 20302:20304 ioctl 40046205 0 returned -22 [ 393.952228][T20309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:26:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="5597", 0x2, 0x8800, 0x0, 0x0) 20:26:18 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:18 executing program 4: getpgrp(0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:26:18 executing program 2: unshare(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) 20:26:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:18 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2db0, 0x90000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x9c8) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000180)=0x5) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) [ 394.420942][T20433] Invalid argument reading file caps for ./file0 20:26:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup2(r0, r1) [ 394.527516][T20444] Invalid argument reading file caps for ./file0 20:26:18 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xfefffffffffffffc, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400080, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="be42690bbbba459e7899004e0dd50738b64feab13891701d58a3c6f61e7b443ec676bd07", 0x24}], 0x1) 20:26:18 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280)={0xa}, 0xacb5) 20:26:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x30, 0x0, 0x8f00) 20:26:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc64"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x9}, 0x8) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001180)={0x54, 0xfffffffffffffffc, 0x7c, 0xf08f, @buffer={0x0, 0x1b, &(0x7f0000000040)=""/27}, &(0x7f0000000080)="805e9a151f485b506f7874230ea1503cf022ebec9688a725396b88c77b66fa5fb200cef52a47cbb9518729422c83c09a76c49ee5f6fb80b88e5ed64771cfa50e23abc500769b6fbe4559730426b514967d73261556b24e4a981b99a87a4b6f42ca0bd951c4cf964884caead6e4bedd09a3880b4f86a80be7fef4eb3f", &(0x7f0000000140)=""/4096, 0x5, 0x10012, 0x3, &(0x7f0000001140)}) 20:26:19 executing program 4: r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="b9", 0x1, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 20:26:19 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x8, @ipv4={[], [], @rand_addr=0x7e0}, 0x40}}, 0x0, 0x7, 0x0, "f724012d1111747c3da8c3be304f90204953e4bdbf8d05b6f697404fe90760725bd68c3d9aa860fadccce078ee7f1dc1de94c056aa84ffe4aed54fba96492d2b0a878c4e9e4627569d963cfb50c117f4"}, 0xd8) pause() openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000040)=0x6, 0x4) 20:26:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc64"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 395.219325][T20580] binder: 20578:20580 ioctl 40046205 0 returned -22 [ 395.228871][T20579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:26:19 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) 20:26:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc64"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8c90000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) 20:26:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x13f) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 20:26:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x200407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 20:26:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x348) 20:26:20 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5473, &(0x7f0000000040)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:20 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x401) 20:26:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e22, @loopback}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80400, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x3ffffc, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x3b, r3}) 20:26:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x13, 0x0, 0x300) 20:26:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:20 executing program 2: unshare(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 396.581893][T20851] binder: 20845:20851 ioctl 40046205 0 returned -22 20:26:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:20 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:20 executing program 4: creat(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x1b, 0x0, 0x0, 0x0}, 0x20) 20:26:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:20 executing program 2: r0 = socket$inet6(0xa, 0x10000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setfsgid(r1) 20:26:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 20:26:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:21 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, r2+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000100000016) 20:26:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8081, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5a}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @rand_addr=0x100000000}}, 0xcf, 0x7fff}, 0x90) 20:26:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) [ 397.165878][T20979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:26:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$void(r0, 0x5450) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:21 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 20:26:21 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x3, 0x0) 20:26:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000140)=""/237, 0x4000, 0x800, 0xfffffffffffff3ff}, 0x18) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:26:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:21 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000040)=""/77, &(0x7f0000000180)=0x4d) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:21 executing program 4: process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) 20:26:21 executing program 5: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f9ffffffff000000000000", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) clock_gettime(0x0, &(0x7f0000005200)) 20:26:21 executing program 2: clock_gettime(0x0, &(0x7f0000000240)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 397.778549][T21110] binder: 21109:21110 ioctl 40046205 0 returned -22 20:26:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:26:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3, 0x9}, 0x8) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) [ 398.001691][T21162] __nla_validate_parse: 14 callbacks suppressed [ 398.001721][T21162] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.018565][T21162] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7, 0xffffffff}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, 0x4) [ 398.110933][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002540), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0x0, 0x2}, 0x90) 20:26:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 398.211402][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 398.267772][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.330932][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.388830][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.426462][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 20:26:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr="7ff88adb590c1d545918a72f9c2f17fe"}}}, 0x108) 20:26:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) [ 398.437663][T21250] binder: 21249:21250 ioctl 40046205 0 returned -22 [ 398.454975][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="a87288660d772c1f59381d47a48819eb2be2fc9cc498573c1bc13eb1c6ad36d2e1474db2b02b7659f2371801a3bdf5d340e421efbe2cdea667459dfdc3a795161f2b69bcd45dfe711806aba437e019e4c9490b6cb10294e848fa1277b65bd311db7d86530f4663d6f6f35d4204cb0eb7", 0x70, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 398.482846][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:26:22 executing program 5: getpgrp(0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) 20:26:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 20:26:22 executing program 2: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 20:26:22 executing program 0: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x2}}, 0x20) 20:26:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000001c0)=' ', 0x1, 0xf401, 0x0, 0x0) 20:26:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x8000040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0xfffffffffffffed5) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) [ 398.981201][T21372] Invalid argument reading file caps for ./file0 [ 399.031656][T21375] binder: 21374:21375 ioctl 40046205 0 returned -22 [ 399.045203][T21379] Invalid argument reading file caps for ./file0 20:26:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000006506000001ed000071185400000000006c640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) [ 399.099068][T21388] Invalid argument reading file caps for ./file0 [ 399.110684][T21380] Invalid argument reading file caps for ./file0 20:26:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0xc) 20:26:23 executing program 4: getgroups(0x2, &(0x7f0000000040)=[0x0, 0xffffffffffffffff]) setgroups(0x1, &(0x7f0000000080)=[r0]) 20:26:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x29, 0x11, 0x0, 0x31) 20:26:23 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000540)=0x5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="f0c14eb741563e79be196c640e1cf29d8f8f1354e4786806860e8f157f121493a0378741745d02f345cbbd4d1b3a979e7ed1b01fb993b77bced49038bdfb8e99879ef4f98b4730c241c3fb02bcaacacd377146e75842d702de1f40196145faac426ecf7b72ce5e9390d4534228fee98561adbe50", 0x74, 0xfffffffffffffffa) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() keyctl$chown(0x4, r3, r4, r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5ffff07"], &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r6, 0x2}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f0000000080)=[{0x6, 0x1, 0x1, 0xff8}, {0x1, 0x81, 0xffffffffffffffff, 0xe21a}, {0x20, 0x3, 0x1, 0xd6a}, {0x6, 0xdb, 0x5, 0x6}, {0x400, 0xfffffffffffffff7, 0xfff, 0x10001}]}, 0x10) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000500)) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@empty, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x301040, 0x0) r8 = accept(r0, 0x0, &(0x7f0000000200)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x101400, 0x0) r10 = dup3(r1, r0, 0x80000) r11 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x1, 0x244082) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x8002, 0x0) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x80000, 0x0) r15 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x10000, 0x0) r16 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x4000c0, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000780)={0x20, 0x4, &(0x7f00000006c0)="8b2d1351d09fa9d3bcb64dd39714d00d2e960ae94c60aa50331abd579f98c60f99a5092d5c534a5a6b4e71f37544d13dab6fdce291dc3c06b07432329f6524d9f0b6cdb783ec8c27ef1f03248cb19ef81bcf276d03c141f5089ac78398fdacf8162e9d56aabc733fcefa4e45ec14271cc0b098d5cfceaabfa5e9ebdf05a47e8c016892ee8227b7a8e79859abdf89", {0x9, 0x0, 0x73795d57, 0x3, 0x8, 0x7, 0xa, 0x5}}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12e}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}]}, 0xc4}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 20:26:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000100000000030000000000000000000000000000000000000000000000000000000000000000000000000000002c06d904614d16ebf1371f7721"], 0x58) 20:26:23 executing program 2: setpriority(0x0, 0x0, 0x10000) 20:26:23 executing program 4: 20:26:23 executing program 3: syz_emit_ethernet(0xc0, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x0, 0x4c}}}}}, 0x0) [ 399.767536][T21507] binder: 21506:21507 ioctl 40046205 0 returned -22 20:26:23 executing program 3: r0 = semget(0x1, 0x0, 0x0) setuid(0xee01) semop(r0, 0x0, 0x0) 20:26:23 executing program 5: r0 = socket(0x2, 0xc003, 0x6) connect$unix(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="82022e2f66696c65300075ab3386cddfb2315903531790d94152d3866231153fe8a5821cf3b08fd0c00e6618cc345c4fda6f1533ff70f40b72fe58d95db72eca49f60e523d186486745ac138b670128ae5c07b93e9790a0529f198d4231ee3b974c1ff23fd8d1d2e37d63abc066f847609a20cc6437618f95acfcd0713ff729de42a7897b7f362cb79f3392e70ec757be6b27782b5c1696233c1dd0e09bf33e4abe466a1845ebc5d0d447c381b2ad31552495d058e52b03d460dd7"], 0x10) write(r0, &(0x7f0000000080)="9e3eaa56000000000004bf9aab4230408600000000d0459370410510fa651c1ece0efdd308e6b7ca", 0x28) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="ba7e7212bcdac31ca2fd80d562d54c3df7a476c2d67a7259dc9184cd85941aabecf11a97a94591b8a8b24df3d3e88649e09d26272bd65f6b5f1e7f999470dd", 0x3f}, {&(0x7f0000000280)="676847cd9bee0525543920d09818b125ab907c321a984e23ee336075aa0f3f813ff4332e1b2b093502ad934500231c6a3803a5befbe2fa64eeaa3279e56da060b842f83dc521c516f096b26682dbee25e694b478a19427f6688d3358cfd52b076862597eb5e92864671f15d6f9fd73043de5d7161f895ec0698141dc20c497f5d60a5139f141d3c50a06b467f32fc64cd3c3f60b8b8781", 0x97}], 0x2) 20:26:23 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:23 executing program 4: r0 = semget(0x1, 0x0, 0x0) setuid(0xee01) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/134) 20:26:24 executing program 3: setuid(0xee01) r0 = semget(0x1, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000000)) 20:26:24 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 20:26:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 20:26:24 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xd6002, 0x80) 20:26:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x9, 0x4}) 20:26:24 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x44) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:24 executing program 3: syz_emit_ethernet(0xc0, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x88, 0x0, @empty=0xac1414aa, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 20:26:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8001000008912, &(0x7f0000000380)="0800b5055e0bcfe87b0071") syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 20:26:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x20000004e20, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x487) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x418a, 0x4) sendto$inet(r0, &(0x7f00000001c0)="83", 0x1, 0x0, 0x0, 0x0) [ 400.588484][T21657] binder: 21655:21657 ioctl 40046205 0 returned -22 20:26:24 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad66b6b3041afbab65d8b4ac2ca35c6e", 0x10) sendmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)='7', 0x1}, {&(0x7f0000000840)}], 0x2, &(0x7f0000000a40)=[{0x28, 0x0, 0x0, "fd7e6c77a4245d235edf732e004e0d3bc0"}], 0x28}}], 0x2, 0x0) 20:26:24 executing program 4: perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:26:24 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x44, 0xa}}}}}, 0x0) 20:26:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'veth0_to_hsr\x00', 0xf3}) 20:26:24 executing program 2: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:26:25 executing program 4: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000018c0)={0x0, 0x0, 0x73, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) 20:26:25 executing program 4: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000018c0)={0x0, 0x0, 0x73, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r0, r1, &(0x7f00000000c0)=0x4b, 0x8) 20:26:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:26:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:26:25 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 20:26:25 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000e40)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:26:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 401.914877][T21926] binder: 21924:21926 ioctl 40046205 0 returned -22 20:26:26 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x210000) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xffffffff858050ac, 0x32314d59, 0x9a57440c49956ff8, @discrete={0x6a7, 0x6}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:26 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1b58) 20:26:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 20:26:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x0, 0x1, 0x3}) 20:26:26 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7001, &(0x7f0000000000)={0x1}) 20:26:26 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) fchmod(r0, 0x0) 20:26:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 20:26:26 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000540)={r3, @in={{0x2, 0x4e24, @empty}}}, 0x84) 20:26:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xb9fe61832e9eaf93) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$NBD_CLEAR_QUE(r0, 0xab08) 20:26:26 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x44000, 0x0) 20:26:26 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0xa0, 0xed, 0x8, 0x424, 0x7500, 0x8212, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x2, 0xf2, 0x23, 0x6b, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000bc0)={0xcc, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001240)={0xcc, &(0x7f0000000480)={0x0, 0x0, 0x4, "a82cab48"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000f00)={0xcc, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:26:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 20:26:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getuid() clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 20:26:26 executing program 4: syz_open_dev$hidraw(&(0x7f0000000080)='/dev/../raw#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x81, 0x32000) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x100, {0x0, 0x50f}, {0x6, 0xff}, @ramp={0x0, 0x0, {0x0, 0x4, 0xfff}}}) r1 = syz_open_dev$hidraw(0x0, 0x7fffffff, 0x200) r2 = syz_open_dev$hidraw(0x0, 0x1, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x8, 0x201) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)=""/47) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hiddev(0x0, 0x0, 0x80) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) write$hidraw(r3, &(0x7f00000002c0)="68845d0d7d454756892a76cf7fa089d091b9546d5f6b46a08fb67882636a4a92d0ace00235cfdaa436f5571c36dae942bb3ac5a6143b94e6431b7141b3b3b89054d6eebc1f5808d2c235862ece04", 0x4e) 20:26:27 executing program 2: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) 20:26:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4082, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8c1, 0x40) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x280e41, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpu.stat\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x44) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000000)) recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000000200)=@in6, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000300)=""/35, 0x23}], 0x4, &(0x7f0000000540)=""/91, 0x5b}, 0x40002002) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e23}, 0x4d, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x0) 20:26:27 executing program 5: syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x81, 0x32000) r0 = syz_open_dev$hidraw(0x0, 0x7fffffff, 0x200) r1 = syz_open_dev$hidraw(0x0, 0x8, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) [ 402.955446][T22187] binder: 22185:22187 ioctl 40046205 0 returned -22 20:26:27 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x1) 20:26:27 executing program 5: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) syz_open_pts(0xffffffffffffffff, 0x0) 20:26:27 executing program 2: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) 20:26:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x304, 0x40, 0x6, 0x8, 0x3af, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x800, 0xa0, 0x1f, [{{0x9, 0x4, 0x9, 0x80, 0x9, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0xdf9, 0x1, 0x1, {0x22, 0xce2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1ff}}}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x350, 0x401, 0x8, 0x800, 0x0, 0x6631ade6}, 0x41, &(0x7f0000000080)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a8029b3546634e0e6c1936d3878cfd65"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x49d00000000000, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7628c0cd9c33604d15f0d64d63d4ad6a"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x7, 0xfff}]}, 0x8, [{0x1004, &(0x7f0000000140)={0x1004, 0x3, 0x3c2f, "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"}}, {0xf3, &(0x7f0000001180)={0xf3, 0x3, 0x827, "9b21f8211240b2acda2410e095468c38c69764368a13509ef6f2be070ad9a47c6ce0333afc853974b764401c06a8d442fdf516e8e6940e8c3e78013d23561fbe3dadd7045a761b431faf603d95bdde7a31cec4383b2d78fe85464750f7b2b446aa0b097049537171010cf74946eebe1372ad886c4fbe734731aa64ae538e658631396ab4099cb0b0744ab306e6a9b5e57fd897cc8316108c5ddb29f3fca4e8469abaccd3829e57cfe6649b64fa27b9e6b79e7cfbde97304a75daf3a4b3e57342f9a44e093ad1bc88fcb0a3692ffbee0e4fb58a2a06c8171201c0946873e88741fd11880f9bc166470ccd27a51fdb31"}}, {0x4, &(0x7f0000001280)={0x4, 0x3, 0x3001}}, {0x17, &(0x7f00000012c0)={0x17, 0x3, 0x2401, "6d318be3d3ca349db72db732e5c872ae93057b"}}, {0x7e, &(0x7f0000001300)={0x7e, 0x3, 0x3c29, "e50371225c1009d36c0559ce90449efe3ad5b49b7c9d3de842451a10119131a0c58cf0c0311a2205063478e4794ae11d712e987887849aa0e6f68c4ee93bdf810a248039fb343951e1172695102c7a52d0ab4567f2de7b7c15bda452ba5e52dfeb13dc6cf7cb46cab9a17d4b45da93fe7a4adb9bc53553748959"}}, {0x98, &(0x7f0000001380)={0x98, 0x3, 0x0, "c13e84d974cc812947bf77f7c8f090b6539aee596294765ba3510759e8d6ab5ec27d7bca1e56169807c41bd6ef719ca1545a13b437f340e05263922ad59cc5350288099d86739b48b25dc2db00f1c07ae92594bcbabd9494292cfc58eece9ea604b4252f06e54614bee9cf613528244dcaad33173e0e31eda3174d877f6a58176bd605ea02be8d27b99a5ba6a9b877388a54461d"}}, {0xf2, &(0x7f0000001440)={0xf2, 0x3, 0x42d, "239d14bae7b2c8bd8c26f5d7e9f9b4403719c8d9415367b0567fb8ca1fbc36475a15e657ac2e0ee6fc496723a693c2f9373efbc360ef619f6a0c71c1cc9d886c2a7734071f3859db84eae35ebfaeb71142dec671c393fcf1bcb0aef4c15cb3a0358bd88353943c9ea1fa5903e22a78e4d04e6af51614d156fc6254a59b466282ecf0f54e36d7064a4ca39f0da080cbeca478cbeae3a2a8086b39de91049f0556828f1d211b0050a8e9793a682cab955b0042db49e7783ce931be82054c33153574d2685dccea6de6c97d0355786068abcb5427d5323a0bfedcde15be83c3109c8000acab0317f17d92a65a38b280"}}, {0x80, &(0x7f0000001540)={0x80, 0x3, 0x80c, "1afc819bd2f3f951731852bf6272b8aa780ba1fe3dce5e65c89bcbc5af8ae520870e58e899bec27d99a44fc3da7a61ffcf55c1983c3a5383ffbc7364fe8dfaaec95ac2146214ca27b47b66cd19e8e9683e45f2d3c2c61d7b9538a3e13abbbcd306590d0e760187204601f3d222546ff811891fecb2edcad1fac7912c"}}]}) syz_usb_ep_write(r1, 0x14, 0xf3, &(0x7f0000001640)="a3c9210533ba8a49762039518ff7978df77c5d8918fc1d6fa007834bb13f821a8ab53e703f5ed71ecaceb684746305245bbd4083a2c869b020964a2b43aeae8eddb605c882d6a990dda8b7c0c2a58a042f93f38d2d3dc3f8131f845c3f2c117ab11cb26f05b42bd334f4b786c9fb352c578b872b736f71494c58710531c9999a1804e48909bea7d5b21d848a385866959a2576149b62647924623035bbf88cf2faf1c8c71d9e5884c78cc37d17a0a30991578d1f2510a3854c9902f4b07b488570a3d3c1eb7ef753c63531c7ff65d2584e6d15c273c2a060a0c89a38f02a7d3037bf26c67f4f75a385cf179a346cd9701afb42") [ 403.312837][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd 20:26:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/254, 0xfe) [ 403.493009][T22311] binder: 22309:22311 ioctl 40046205 0 returned -22 [ 403.572845][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 403.712879][ T12] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 403.721300][ T12] usb 4-1: config 0 has no interface number 0 [ 403.728090][ T12] usb 4-1: config 0 interface 186 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 403.738353][ T12] usb 4-1: config 0 interface 186 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 403.748507][ T12] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=82.12 [ 403.757741][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.770234][ T12] usb 4-1: config 0 descriptor?? [ 403.825144][ T12] smsc75xx v1.0.0 [ 403.842668][ T2871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 404.082565][ T2871] usb 1-1: Using ep0 maxpacket: 16 [ 404.253836][ T12] ================================================================== [ 404.261975][ T12] BUG: KMSAN: uninit-value in smsc75xx_bind+0x541/0x12d0 [ 404.269004][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0+ #15 [ 404.276100][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.286159][ T12] Workqueue: usb_hub_wq hub_event [ 404.291334][ T12] Call Trace: [ 404.294634][ T12] dump_stack+0x191/0x1f0 [ 404.299082][ T12] kmsan_report+0x162/0x2d0 [ 404.303613][ T12] __msan_warning+0x75/0xe0 [ 404.308144][ T12] smsc75xx_bind+0x541/0x12d0 [ 404.313031][ T12] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 404.318335][ T12] usbnet_probe+0x10d3/0x3950 [ 404.323096][ T12] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 404.329192][ T12] ? usbnet_disconnect+0x660/0x660 [ 404.334388][ T12] usb_probe_interface+0xd19/0x1310 [ 404.339683][ T12] ? usb_register_driver+0x7d0/0x7d0 [ 404.345002][ T12] really_probe+0x1344/0x1d90 [ 404.349736][ T12] driver_probe_device+0x1ba/0x510 [ 404.354874][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.361246][ T12] __device_attach_driver+0x5b8/0x790 [ 404.366759][ T12] bus_for_each_drv+0x28e/0x3b0 [ 404.372045][ T12] ? deferred_probe_work_func+0x400/0x400 [ 404.377897][ T12] __device_attach+0x489/0x750 [ 404.382693][ T12] device_initial_probe+0x4a/0x60 [ 404.387720][ T12] bus_probe_device+0x131/0x390 [ 404.392604][ T12] device_add+0x25b5/0x2df0 [ 404.397133][ T12] usb_set_configuration+0x309f/0x3710 [ 404.403798][ T12] generic_probe+0xe7/0x280 [ 404.408328][ T12] ? usb_choose_configuration+0xae0/0xae0 [ 404.414068][ T12] usb_probe_device+0x146/0x200 [ 404.426382][ T12] ? usb_register_device_driver+0x470/0x470 [ 404.432282][ T12] really_probe+0x1344/0x1d90 [ 404.436978][ T12] driver_probe_device+0x1ba/0x510 [ 404.442104][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.448430][ T12] __device_attach_driver+0x5b8/0x790 [ 404.453824][ T12] bus_for_each_drv+0x28e/0x3b0 [ 404.458680][ T12] ? deferred_probe_work_func+0x400/0x400 [ 404.464696][ T12] __device_attach+0x489/0x750 [ 404.470681][ T12] device_initial_probe+0x4a/0x60 [ 404.475733][ T12] bus_probe_device+0x131/0x390 [ 404.480782][ T12] device_add+0x25b5/0x2df0 [ 404.485415][ T12] usb_new_device+0x23e5/0x2fb0 [ 404.490297][ T12] hub_event+0x5853/0x7320 [ 404.494796][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.500784][ T12] ? led_work+0x720/0x720 [ 404.505115][ T12] ? led_work+0x720/0x720 [ 404.509821][ T12] process_one_work+0x1572/0x1f00 [ 404.514907][ T12] worker_thread+0x111b/0x2460 [ 404.519950][ T12] kthread+0x4b5/0x4f0 [ 404.524020][ T12] ? process_one_work+0x1f00/0x1f00 [ 404.529598][ T12] ? kthread_blkcg+0xf0/0xf0 [ 404.534199][ T12] ret_from_fork+0x35/0x40 [ 404.538626][ T12] [ 404.540953][ T12] Local variable description: ----buf.i93@smsc75xx_bind [ 404.547872][ T12] Variable was created at: [ 404.552282][ T12] smsc75xx_bind+0x44c/0x12d0 [ 404.556968][ T12] usbnet_probe+0x10d3/0x3950 [ 404.561656][ T12] ================================================================== [ 404.569846][ T12] Disabling lock debugging due to kernel taint [ 404.576116][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 404.582718][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.2.0+ #15 [ 404.591204][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.601351][ T12] Workqueue: usb_hub_wq hub_event [ 404.606394][ T12] Call Trace: [ 404.609730][ T12] dump_stack+0x191/0x1f0 [ 404.614120][ T12] panic+0x3c9/0xc1e [ 404.618051][ T12] kmsan_report+0x2ca/0x2d0 [ 404.622589][ T12] __msan_warning+0x75/0xe0 [ 404.627797][ T12] smsc75xx_bind+0x541/0x12d0 [ 404.632532][ T12] ? smsc75xx_write_wuff+0x9e0/0x9e0 [ 404.637819][ T12] usbnet_probe+0x10d3/0x3950 [ 404.642538][ T12] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 404.648671][ T12] ? usbnet_disconnect+0x660/0x660 [ 404.653795][ T12] usb_probe_interface+0xd19/0x1310 [ 404.659111][ T12] ? usb_register_driver+0x7d0/0x7d0 [ 404.664515][ T12] really_probe+0x1344/0x1d90 [ 404.669299][ T12] driver_probe_device+0x1ba/0x510 [ 404.674413][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.680536][ T12] __device_attach_driver+0x5b8/0x790 [ 404.685945][ T12] bus_for_each_drv+0x28e/0x3b0 [ 404.690984][ T12] ? deferred_probe_work_func+0x400/0x400 [ 404.696756][ T12] __device_attach+0x489/0x750 [ 404.701614][ T12] device_initial_probe+0x4a/0x60 [ 404.707235][ T12] bus_probe_device+0x131/0x390 [ 404.712094][ T12] device_add+0x25b5/0x2df0 [ 404.716633][ T12] usb_set_configuration+0x309f/0x3710 [ 404.722195][ T12] generic_probe+0xe7/0x280 [ 404.726727][ T12] ? usb_choose_configuration+0xae0/0xae0 [ 404.732463][ T12] usb_probe_device+0x146/0x200 [ 404.737375][ T12] ? usb_register_device_driver+0x470/0x470 [ 404.743268][ T12] really_probe+0x1344/0x1d90 [ 404.747958][ T12] driver_probe_device+0x1ba/0x510 [ 404.753086][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.759072][ T12] __device_attach_driver+0x5b8/0x790 [ 404.764568][ T12] bus_for_each_drv+0x28e/0x3b0 [ 404.769566][ T12] ? deferred_probe_work_func+0x400/0x400 [ 404.775316][ T12] __device_attach+0x489/0x750 [ 404.780106][ T12] device_initial_probe+0x4a/0x60 [ 404.785149][ T12] bus_probe_device+0x131/0x390 [ 404.790178][ T12] device_add+0x25b5/0x2df0 [ 404.794775][ T12] usb_new_device+0x23e5/0x2fb0 [ 404.799860][ T12] hub_event+0x5853/0x7320 [ 404.804941][ T12] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 404.810828][ T12] ? led_work+0x720/0x720 [ 404.815150][ T12] ? led_work+0x720/0x720 [ 404.819518][ T12] process_one_work+0x1572/0x1f00 [ 404.824587][ T12] worker_thread+0x111b/0x2460 [ 404.829380][ T12] kthread+0x4b5/0x4f0 [ 404.833441][ T12] ? process_one_work+0x1f00/0x1f00 [ 404.838733][ T12] ? kthread_blkcg+0xf0/0xf0 [ 404.843357][ T12] ret_from_fork+0x35/0x40 [ 404.848885][ T12] Kernel Offset: disabled [ 404.853232][ T12] Rebooting in 86400 seconds..