0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 09:15:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0xc5e) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x400000000000001) [ 270.446867][T10880] binder: 10878:10880 ioctl c0306201 0 returned -14 09:15:11 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080004147a24e64500001c0000006c907800000000e0000001080090780000000030f2e930dba23640c7718435f6e20fffff2951a24262468455c4ae58d17c0fc0b2f53ed9ba9d17544eff09d57f1db8129acbd8464f09b94ebc0ee116f84342460449b503a5bcf4d5153505513fcf58c825e8e3c6073b462c08a0a6c948a8"], &(0x7f0000000080)={0x0, 0x3, [0x0, 0x2d9]}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4100, 0x0) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0x7, 0xcef1, r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=""/187, &(0x7f0000000180)=""/86, &(0x7f0000000200)=""/232, 0x2003}) 09:15:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x68000000) 09:15:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 09:15:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:11 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 09:15:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x100000000000, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)="2e0000002a00815fe45ac187185095cf0700b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 270.664180][T10901] binder: 10900:10901 ioctl c0306201 0 returned -14 [ 270.731362][T10912] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.808569][T10915] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 09:15:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x6c000000) 09:15:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 09:15:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 09:15:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1200000000000002, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000000)=@in6={0x2, 0x4e24, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000001100000067000000bbde"], 0x12}, 0x8000) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) sendto$rose(r2, &(0x7f00000001c0)="694f8ac38dcbb7fb1d5e45d6e104ed52e864476f45c0f282f7420aaf5b71bd9fe9fa7d880b97f653fa2abd4b5c49db14c86db713ed3a04cbc79b1e8efc14155a4ac854cc90e247a581e4acc5f6dbbcbe046ac80b694e5ab7127f338c50395811cf5bb514c762582ec10bb0c49eec9971c15d3fa7b6bf616d538ba029cfb222fc25d89dc1fc6977ad83a050054acc7e23ecc0cf8d0c3ccab4c06b5e2ebbd9f63f8426bd1d4dab2fb6aa750cb7eec933a50570cf7d7cab6a1505acc8acc5511155a4b2d31dabb6deb23a2dca7bc06e98a30a2bf45f6cad30705370d9be54563c15618bed2f94c6b9767253e7a734a40728c0c63809ca8cd02cffc4fa9b00", 0xfd, 0x80, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) [ 271.048335][T10921] binder: 10920:10921 ioctl c0306201 0 returned -14 09:15:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r0, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r0, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 09:15:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x74000000) 09:15:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:12 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() setregid(r0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x3}]]}}}]}, 0xfffffffffffffeb6}}, 0x0) 09:15:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r0, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r0, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 09:15:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x7a000000) 09:15:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0}, 0x20) stat(0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) lchown(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000300)={0x1, 0x0, 0x102, 0x4, {0xffff, 0x9, 0x5, 0x3}}) gettid() stat(0x0, &(0x7f00000015c0)) r1 = memfd_create(&(0x7f0000000140)='proc}GXLeth0^wlan0#:\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001540)='/dev/udmabuf\x00', 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) tkill(r2, 0x20) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20, &(0x7f0000000100)={'trans=unix,', {[{@access_user='access=user'}, {@afid={'afid', 0x3d, 0x7ff}}], [{@measure='measure'}]}}) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) 09:15:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xfeffffff) 09:15:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r2 = fcntl$getown(r1, 0x9) gettid() fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r0, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r2) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r0, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)) ftruncate(r3, 0x7fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 09:15:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) 09:15:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xffffff7f) 09:15:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) 09:15:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:15 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xb21, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c65302066696c746572002066696c7465720020202f6465762f6d656469612300202f6465762f6d656469612300202063707573657476626f786e657430c32e2a0a10ff163347fbdba804201ea26e490e0ef112a35545ebe1a8a6422f9191bcc15ca0f5f0b3e93eb90a7a50cfd58630a581ef7115086ddb61f3c348a596c5510e112acd23edc21e3edd36ad47ceccc9783e6fd625888cc7f5555884b80ae7ccf86dd01aebc700819e179f2e3a3be5036b1b3ecb0d14cda53cfdd3066a8ca73650e8d37e09b45ef8cce8d7e1c862e7678185cd04e2eb9bda151d694c6daf7a31310692e15a8301ee3f6355249216c48c37b0f8eb2e97233e5fb320"], 0xd8) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="70acb897547406b5cb1eb52bdd1af1dfe60a1db10f88e86f275c914c793563cfa583d9dd7e391f07cb69b440ebd362daa73ccaca08e2da6ca8fff55271e53b06c9784b6a2996b9590e368626bae4db32f8514640836bac20ae7e9f7a2658d0f21b8ad19965c7f7ee139e49e3ddb7223fa33792c5133aea17b424ea1f3d2e7c3bb39fa175221388c6baa7e22bfe663ba9fe061c12339635f10fbc7d81e8f5937c1af103219a5eaa9451ac06d62e62a0ca20fdd1179ed25fab822dac30b69367ade42ad2", 0xc3}, {&(0x7f0000000440)="eb0e15fbfecc04bc8ef4c7dd9a1f8321def56b192d7ce31767c49b3b9124a52374564fa8f1c14d0a2a1157c4d715ff67bc8c69d0407ad223669df30cb2473c33ecfb0836a49006595ac8e438bcaf526c89f7aa7cb5c5785f65af508170f4984dc7fd38c816da09f8ddc16be08ba710c469ffcc13323c8e1ec0c729ea9ad861b5565f90015c8b1028a6231f75344daf822230587bb233c30d2abd80f73dd20319f547b69180275a56ad4e812b8ae7ccacc2d39617be68854c01304e9449351a5825cbbf5b6619b0ceeb3e98549592280b5241d135f8b1018497e02aed77311ba17196e5d3052317ae46a28e45be270e5d7ce97187", 0xf4}], 0x2, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f00000002c0)=0x409) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x100, 0x0) 09:15:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xfffffffe) 09:15:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) 09:15:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 09:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x100000000000000) 09:15:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1ff, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0), 0x0}, 0x18) 09:15:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 09:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x200000000000000) 09:15:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x300000000000000) 09:15:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) uselib(&(0x7f0000000280)='./file0\x00') r2 = accept(r1, &(0x7f0000000140)=@isdn, &(0x7f0000000000)=0x80) dup2(r1, r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/78, &(0x7f00000002c0)=0x4e) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x04\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) 09:15:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 09:15:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 275.180049][T11107] bond0: Error: Device is in use and cannot be enslaved 09:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x400000000000000) 09:15:16 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 275.277086][T11118] bond0: Error: Device is in use and cannot be enslaved 09:15:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x500000000000000) 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:17 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x600000000000000) 09:15:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/247) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 09:15:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 276.044032][T11157] input:  as /devices/virtual/input/input5 [ 276.068925][T11157] input: failed to attach handler leds to device input5, error: -6 09:15:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x700000000000000) 09:15:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 276.177578][T11172] binder: 11170:11172 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:15:17 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 276.237376][T11157] input:  as /devices/virtual/input/input6 [ 276.243351][T11157] input: failed to attach handler leds to device input6, error: -6 09:15:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x800000000000000) 09:15:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffd) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x120, 0x208, 0x2d8, 0x208, 0x2d8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'erspan0\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @empty, @icmp_id}}}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'caif0\x00'}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x20}, &(0x7f0000000500)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={r1, 0x6, 0x3, 0x400}, 0x10) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x341, 0x0) r2 = syz_open_dev$media(&(0x7f00000005c0)='/dev/media#\x00', 0x10001, 0x140) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000600)={0x1, "8d9c0768a8b19053f984986dee45fdb91cc4fe92a88a44d64b4a7bf060fe981f", 0x2}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000580)) 09:15:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:18 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xa00000000000000) 09:15:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 09:15:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xf00000000000000) 09:15:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:15:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:18 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\v'], 0x0, 0x0, 0x0}) [ 277.289425][T11237] binder: 11235:11237 unknown command 11 [ 277.328640][T11237] binder: 11235:11237 ioctl c0306201 200001c0 returned -22 09:15:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x4800000000000000) 09:15:19 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\v'], 0x0, 0x0, 0x0}) 09:15:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 277.825986][T11249] binder: 11248:11249 unknown command 11 [ 277.860851][T11249] binder: 11248:11249 ioctl c0306201 200001c0 returned -22 09:15:19 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x4c00000000000000) 09:15:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\v'], 0x0, 0x0, 0x0}) 09:15:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x6800000000000000) [ 278.117743][T11274] binder: 11272:11274 unknown command 11 [ 278.140975][T11274] binder: 11272:11274 ioctl c0306201 200001c0 returned -22 09:15:19 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:19 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x6c00000000000000) [ 278.379652][T11286] FAULT_INJECTION: forcing a failure. [ 278.379652][T11286] name failslab, interval 1, probability 0, space 0, times 0 09:15:19 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 278.543116][T11286] CPU: 0 PID: 11286 Comm: syz-executor.2 Not tainted 5.1.0-rc5+ #69 [ 278.551156][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.561228][T11286] Call Trace: [ 278.564550][T11286] dump_stack+0x172/0x1f0 [ 278.568918][T11286] should_fail.cold+0xa/0x15 [ 278.573532][T11286] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 278.579620][T11286] ? ___might_sleep+0x163/0x280 [ 278.584489][T11286] __should_failslab+0x121/0x190 [ 278.589454][T11286] should_failslab+0x9/0x14 [ 278.593982][T11286] kmem_cache_alloc_trace+0x2d1/0x760 [ 278.599366][T11286] ? kasan_check_read+0x11/0x20 [ 278.604226][T11286] ? do_raw_spin_unlock+0x57/0x270 [ 278.609351][T11286] ? _raw_spin_unlock+0x2d/0x50 [ 278.614216][T11286] binder_get_thread+0x1db/0x7c0 [ 278.619163][T11286] ? __might_sleep+0x95/0x190 [ 278.623853][T11286] binder_ioctl+0x1e5/0x183b [ 278.628454][T11286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 278.634706][T11286] ? binder_thread_write+0x2820/0x2820 [ 278.640173][T11286] ? tomoyo_path_number_perm+0x263/0x520 [ 278.645808][T11286] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 278.651627][T11286] ? smack_log+0x415/0x540 [ 278.656065][T11286] ? binder_thread_write+0x2820/0x2820 [ 278.661538][T11286] do_vfs_ioctl+0xd6e/0x1390 [ 278.666138][T11286] ? ioctl_preallocate+0x210/0x210 [ 278.671247][T11286] ? smack_file_ioctl+0x196/0x310 [ 278.676273][T11286] ? smack_inode_rename+0x2d0/0x2d0 [ 278.681573][T11286] ? tomoyo_file_ioctl+0x23/0x30 [ 278.686521][T11286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.692774][T11286] ? security_file_ioctl+0x93/0xc0 [ 278.697903][T11286] ksys_ioctl+0xab/0xd0 [ 278.702067][T11286] __x64_sys_ioctl+0x73/0xb0 [ 278.706667][T11286] do_syscall_64+0x103/0x610 [ 278.711267][T11286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.717162][T11286] RIP: 0033:0x458c29 [ 278.721060][T11286] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.740758][T11286] RSP: 002b:00007f0bf7746c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.749178][T11286] RAX: ffffffffffffffda RBX: 00007f0bf7746c90 RCX: 0000000000458c29 [ 278.749186][T11286] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 278.749192][T11286] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.749200][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0bf77476d4 [ 278.749207][T11286] R13: 00000000004bff7b R14: 00000000004d22e8 R15: 0000000000000005 [ 278.779596][T11286] binder: 11282:11286 ioctl c0306201 200001c0 returned -12 09:15:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x7400000000000000) 09:15:20 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:15:20 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 278.936539][T11304] binder: 11302:11304 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:15:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x7a00000000000000) 09:15:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 279.153293][T11324] binder: 11322:11324 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:15:20 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x2, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xfeffffff00000000) 09:15:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x5421, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xffffff7f00000000) 09:15:21 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x1fffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f00000001c0), 0x4) 09:15:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x5450, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xffffffff00000000) 09:15:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x120, 0x120, 0x360, 0x290, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x5, &(0x7f00000000c0), {[{{@ip={@rand_addr=0x1, @empty, 0xffffffff, 0xffffffff, 'gre0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x29, 0x3, 0x44}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xff, [0x3ff, 0xffff, 0x2, 0x3, 0xfff, 0x1b4e], 0xdf0, 0xfffffffffffffa25}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@local, @gre_key=0x8d8, @gre_key=0x400}}}, {{@uncond, 0x0, 0x138, 0x170, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x0, 0x5}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xf, @loopback, @broadcast, @icmp_id=0x67, @gre_key=0x5}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @rand_addr=0x80000000, @broadcast, @icmp_id=0x65, @port=0x4e21}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00', {0xff}, {}, 0x29, 0x2, 0x1}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x5, @port=0x4e23}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000680)=0x1e) socket$inet6(0xa, 0x1, 0x0) close(r0) 09:15:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x5451, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x228, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:22 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x120, 0x120, 0x360, 0x290, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x5, &(0x7f00000000c0), {[{{@ip={@rand_addr=0x1, @empty, 0xffffffff, 0xffffffff, 'gre0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x29, 0x3, 0x44}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xff, [0x3ff, 0xffff, 0x2, 0x3, 0xfff, 0x1b4e], 0xdf0, 0xfffffffffffffa25}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@local, @gre_key=0x8d8, @gre_key=0x400}}}, {{@uncond, 0x0, 0x138, 0x170, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x0, 0x5}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xf, @loopback, @broadcast, @icmp_id=0x67, @gre_key=0x5}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @rand_addr=0x80000000, @broadcast, @icmp_id=0x65, @port=0x4e21}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00', {0xff}, {}, 0x29, 0x2, 0x1}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x5, @port=0x4e23}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000680)=0x1e) socket$inet6(0xa, 0x1, 0x0) close(r0) 09:15:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x5452, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x102101) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x81, 0x4) keyctl$describe(0x6, r0, 0x0, 0xffffffffffffff81) 09:15:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x4000000048002, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x80000001, 0xd7, [], &(0x7f0000000080)=0x4}) 09:15:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0x18, 0x0, 0x1401, 0x0, 0x0, 0x35, 0x0, 0xe001}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$kcm(0x29, 0x5, 0x0) 09:15:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x5460, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:22 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x401) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x97, "853f162d00ef5ed9abb064a3c4ece964052521b758b805969434ac5427557834d6852302c0dc50bd64c6562fd872fbfb40d015acf60710bf57366cf58d8bc7a5fc06f4c45f7f986bf3192da27664b26f42331969c602f68b968e1189276debf268cc36215485f22b5ce0127b0e0fde1e5f668b2e5b9a4fb0dd1f69b11817213f7397caa5c646a73ccb26479d2404814742168323dfbbce"}, &(0x7f00000001c0)=0x9f) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000200)={r3, 0x2, 0xfffffffffffffff9}, 0x8) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) dup2(r4, r0) 09:15:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x3f, 0x4) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:23 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x40046207, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:23 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100), 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002080)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000002180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002200)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000002300)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000026c0)={@local, 0x0}, &(0x7f0000002700)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002740)={0x11, 0x0, 0x0}, &(0x7f0000002780)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002880)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002900)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002940)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000002a40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006180)={'eql\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f00000061c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006240)={'vcan0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000006280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000062c0)=0x14) accept(0xffffffffffffff9c, &(0x7f00000063c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000006440)=0x80) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006580)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000006600)={@remote, @multicast1, 0x0}, &(0x7f0000006640)=0xc) ioctl$sock_ifreq(0xffffffffffffff9c, 0x8935, &(0x7f0000006680)={'erspan0\x00', @ifru_addrs=@can={0x1d, 0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007f80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000007fc0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008000)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000008100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008140)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000008240)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000009380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000093c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000094c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009500)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009540)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000009640)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000009bc0)={@dev, @multicast2, 0x0}, &(0x7f0000009c00)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f000000b400)={@local, 0x0}, &(0x7f000000b440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f000000b540)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b580)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f000000b680)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000bf80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000000bf40)={&(0x7f000000b6c0)=ANY=[@ANYBLOB='P\b\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="b80002003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r5, @ANYBLOB="80000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400cb00000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="c000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400f303000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0400020008000100", @ANYRES32=r13, @ANYBLOB="ec00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400fbffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="03000000", @ANYRES32=r16, @ANYBLOB="6402020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000bdd000008000600", @ANYRES32=r18, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffffff08000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004007f00000008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="f00102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r23, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000010008000600", @ANYRES32=r28, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000004000008000100", @ANYRES32=r29, @ANYBLOB="c000020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000800003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r30, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x850}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x40046208, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x0, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x2, 'fo\x00', 0x13, 0x78, 0x28}, {@remote, 0x4e20, 0x4, 0x2, 0x6, 0x2}}, 0x44) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x100000012, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000080)='\x00\x00\x80\x01\x00\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000001c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xe, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aec75e77"}, 0x0, 0x0, @offset, 0x4}) 09:15:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0xfde4) 09:15:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x40049409, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000018c0)={0xb, 0x5, 0x209e20, 0x2, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x81fffd, 0x0}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0xffffff40) 09:15:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:23 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100), 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) 09:15:24 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="9c11579b4dc6730a878d0bb882aa599d8939f679c4233d385b79813c032807e190f5637f7ec874e6a50ac644def96f70c1758007f7a6e379df0f9d133160db36322a4f1a8b8ad9428d8e1f870f67c3335123ef73cdd08ab7c897ac7cfdf11ad348c41f090566e7bfe29586b37949800324448d8865601f9666ab48a238cbc29e7a174e68838d91bde0a4938ff22593010b4f1798765a318c590d232297897d9fe293589fe78c4a5967bcb6b04f1c5c76b52275c6230be92c673832725f39915eefa49e98cb50e07bce72bb1550160e9ae52abc237a4440ceb3c741cea8ceb04ac9d914b60fd0e059"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100024, 0x500001c) 09:15:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0x4020940d, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:24 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x8a001) r1 = fanotify_init(0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x0, 0x200, 0x1, 0x1000}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r3 = msgget(0x3, 0x4) msgsnd(r3, &(0x7f00000006c0)={0x1, "e09a467c21138795d8989c66a7d0a697603488f7512469b48a8ff0e08b8958cc2675970d442b3f0cc4074fae19a1875e33d010c57b6a44f9582695a04f3bc26955dcfd0d411b19d46e49b2948ac5acc00a0c7f543c33abb86e79ae9f16d8794dfdadf80c2f8bd3c50906a3a22a977afbd382cde436651e073e303e90f1851de36bf40e38091e78446041f4403a265f4bf61d182685f3d64c980b81931862bb76cfc3be885f3106e5"}, 0xfffffcd0, 0x1000000800) fanotify_init(0x8, 0x101002) keyctl$setperm(0x5, r2, 0xffffffff) keyctl$describe(0x6, r2, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000780)) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)="8ac7ec183d69cf0750b68412fd5803695b292050df79ad1230518ba0bfc7", 0x1e}, {&(0x7f00000001c0)="7e5288ac14b009372a007812c837b305c3b0ad670753677a36f6b59b3434a7816db58a39504a520fd8179fa33bca0f8271d532cb129137863cbd7908af8f3999f5a91872ca025675fbb61a09620afb2efa3aa4a87c8b391163c27d5a0ccc60776b59cf6f47bce85dc5e22f1b12e228c2e5924eb54cdc0f4fe8b021306658b061990e28f5323dc77359c9ed7b6d65fa7752813d520e3dc0b193ee16b1806f22e4c2e6635f7e8288ee1e9f5725c8b04aa4fd5ec812d2c819e738fcc9ac94a1e58f1580f042af52e246808bf33beb955d6acbe2e94a2d59c35bfececb8e7992", 0xde}, {&(0x7f00000002c0)="42c9b05a5225a34109ae855449246377c37f3f0d0185c8c760f34687109480de6cb917367dca0dd727624f8c02943c3a38dc156ffe39d61794cea1bb1f0c5e4c370578032d0db36aea2cca6951f407372dfbc3c6f8b3c17469f2680d43c7cdfea0e2ccc81e819ab894d13ceb085d58f7bd85b2865811d67d934c44e5fe29b38e205a8fc5a769354c21ef6f5d8b918ebdc4be509a94607d5582517ee9fa578dfbc4f582ce106b34b36124107aaf69e90974269f679836a9621bab4ba57f1915840155b92fb754c76045159a1dfa5cbaa5fe2a873b774f474dce75932e78ba9636bad3f74cef3a49b1c0de4d9d9e10427d", 0xf0}, {&(0x7f00000003c0)="d065b0ea12d5309a16899eff551545ef0c0689b7c50048f3abd56ff5fa2b4eb0c1d36ba11de4c75ef47dcd4596e3c2dc173017d025ecc019e1bff6c1bdd5187186e820e5967d91c26c11fffdce4019976576a00ee1c9db4dc58b99d8a7bcaf0e5190a5868fbaa7f0bc88dcbbf44f6a6593ce496a4686664a6c779ef0ed4f7f", 0x7f}, {&(0x7f0000000440)="4ed225595398b23fe7dbab7f699a63908f3bd7f5a5157b9804ec633c8762e22c219f2b02bc24a3050dfe4348fd0f9beca43895f5258c49f87cc9622d8f07130596a7f12d69d3a0b4495e9321e7f1a1bd0d32607c250d56a0ad135029a9d24469c9b789dda021667d71c714746e714324d514297cea8775573ba029856f1fd35c3e23f9d2f045a54e00aa51a5f8a9bd97d80ab3ff519eff1101f1809368542dccb71da6dcb2c962cdba32db5e8bcd334ac28940740a8f0f3f22caa45ff594a531174fccef9954bbc74f0c42ae17c8c4692fa17189b97c57c97bcadf", 0xdb}], 0x5, 0x0, 0x0, 0x1}, 0x48040) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000880)) [ 282.919769][ T26] audit: type=1804 audit(1555406124.207:56): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir270269121/syzkaller.a2Z4Ok/161/memory.events" dev="sda1" ino=17010 res=1 09:15:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:24 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100), 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x101100) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x9, 0x9, 0x83, 0x1, 0x2, 0x6, 0x4, 0x20, 0x38, 0x238, 0x3, 0x1, 0x20, 0x2, 0x0, 0x6, 0x3ff}, [{0x6474e557, 0x800, 0x8, 0x8, 0x8, 0x4fd, 0x1, 0x1}], "ec3b3ee23fcf94a6b3246739d8eaf2fb312054cb5f63b0c43d0698d9e7", [[]]}, 0x175) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x1, 0x1, {0x5, @vbi={0x0, 0x0, 0x8, 0x0, [], [0x8bf4]}}}) 09:15:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="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", 0x1000, r0) r2 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000001140)={'syz', 0x3}, &(0x7f0000001180)="060f683fb85fd8fb9e905b865752b703cf9090d7c1c242fc7b3a9ccff31590e0c8d118c4afb8417e53ca84818a515728321e9e996bd63e5cf8e3bf8b88d842630e21c1f6b4d17bc167332be165995bef060a26450ecbbbc57c160d00750c1ebef4ece6eeb589a9e94688e2466393c733da83802ece2c85310843fe877623774335086c8cdd18cb0433f423346e029a5bb7fa7ae6c6d6a2256ee5fc152a8e23ceb807f24736d80a5bf9d3d1da3e91209cbbdc1a7550e234066a4d14a9d43caf10e2e016b56c78c3cf472cba384c96a252e5732b93a943", 0xd6, r0) r3 = add_key$user(&(0x7f0000001280)='user\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)="23076f9c3bbdf4514dc0736d7614169125b347e1631f19897586da37fd15e13aadf90f078aa053d080d17b3ddb0c17d475741495e5b858a2278dc449b193f31cde0fc93059a4e25dfb0fc9968c67b4254d5561a038e26d795487ee7862c281b389e784bfa5835bb5be9304cbc075b186b62543e54e180095f82b20ffb0be8394bcaa674a0b84c4aca03da2910abfbec080752346361612623a2f711692a90528c26d43378cf791636bc55dc2af97c9a1c00af6fd081c221eeaca5a515c96681eb681be4207cff04cc754691e2a67c44a72007a136dc043fa5a59e3e8937e62a0d26735dd904fa99aa75670702aa17a4ea264bc091768b96cb6940fe35d8d", 0xfe, r0) keyctl$dh_compute(0x17, &(0x7f0000001400)={r1, r2, r3}, &(0x7f0000001440)=""/72, 0x48, &(0x7f00000015c0)={&(0x7f00000014c0)={'poly1305-simd\x00'}, &(0x7f0000001500)="dd29ee1a93bc4cc5ecd498d09a1e3c07582662a82bbbf3e1bbdca91bf3f1eeb02b6c741750d90e05e4d7caee4d1ee94faed9e5f57dab962902b24f5c33531ad782d537cdff965f5231c35b97492184cbe3c753bd59141c31951eb99680e260fa7b5a925887839262dbbbb58bc5a26d0a78d4898254b69f6ca56bb898c7bcb0d671", 0x81}) 09:15:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000700)=[{&(0x7f0000000040)="ba77003ed440a7c7c1686a8b6c4d10affe7f4385ba5102c215cfd4c77ae61eb963684462273e21de6eb67d0df1d581966b6223e43398cb427cdb0f0abc40500ce0f16d33b9885d59d1540b2d34dd641661abe8d2dbaa", 0x56}, {&(0x7f00000000c0)="7321dddd5edc", 0x6}, {&(0x7f0000000140)="4652d559e03d856b53c76d8e8ac924646b155b44642a723f167aebeb818ab8b6334914668e27037ef5358b7739b2583b5b691278cf9cb6f78bb9fed307a41da42f445e7c9346517b791cd3c04a7df9f21d3bddd35c654b4ef60f9236d18d5880f93f3d9bd11d4783111c0ab69899e174ec07053a783c4b1e944070b7df76dcb5088b688e0e33b5ab3c8607027e7a224d4afe96ea9b58c44793455d116d43ca8e5fd55b693fa8fc5c956557fe9c210adfc5569f747889343abcf1", 0xba}, {&(0x7f0000000200)="d230b2082b0979f6851ecb8e67cb45a7936aea1f6aa60d8c39df03aea92df0853f1a001fce4c7da35007297b4cac4e4b10cba072e357ffbe746b348e3a9e4a6f0d1b8a6d561612372bf76adee63b9f0d73c6a87a5048d362fc5fa4561d22bfeb2131421bedd49d4b331abe076ae30a15e84f022833c427d44e6bfdd84f18730ab815f90dc29ef0091f46509fe1296efda81e6b4794006794fc00be310e2cb61dd846e8df7ca3f21b0d57f781da9dd5", 0xaf}, {&(0x7f00000002c0)="479a8cfb8961bef2e053ac3a47bef0bf441c17c3f81c3418f43987315e680be250cd58647694f30a809989a5f0522d540843c7a92d149d0b14a4c69878e8ef19025b5e6cbbbb706b58f3df86dbc97fe95d9d1e6abca60ea8eed03cd3dadf2b2cc20a90af9cdcd241d357530a394f2068f46d7420457931a4979c7665dec7f6c0e09157b44f97a2eb5db6e45b67a40688cbde4624fec680dcd5bffa87aff96d8c5f0f28a718d54cfbcb3158cd595971dc0b0ba28f6ab1", 0xb6}, {&(0x7f0000000380)="b147f2a355578355274e85a0e0c80f29c9c3ab3417f6dabd36e2bc2281a6a2762a0d2c7c896c63fdcce96cd2551092672e7c40056b056265be1dede0a51a6854859f9db680423db2fe3ac1071c8e4c6e716dc51e606f65e991aef389b0643de815de2374f9172c1aad2f909294d22ca3ad375a390285af12942bd4f7bde66e849d6c49f06e4b1f7143209b069260eb012336fc6a054170124198fa3ed802f37c75fe961e75abf3d565a259e2f8f12c3c2e41f4b251bce1344d731fbdcf927d7d5a5e5588b3716db3f2045ebc9d3d7937dcfa87d22191841fb5ecc1f3f8", 0xdd}, {&(0x7f0000000480)="c20ee3f889aee54d217eba9d88fbba98c739df37812a1f958a19a29e9ef3188933fd9d74edc45cfb75b1af1ba391d46186df3778e27057a22373cc29f0e8f18a757612f744e2964ca08de17a96edda30b0c9589c8aa5f6d153e2fca4fd4c7a714e691c4d7932adddb607f04fdd05bebe71a85e88d7b284589fd2d80d3a364d54d9", 0x81}, {&(0x7f0000000540)="07af728e1d56d6c8d81b6115372e522e2c0f1039dd4c1f9ab2db23cb85d7a658e121f1f6a6959368f4bda4a092c92367c9b434ffeee613b713ea576cdbc10cb419bc890b9f3c225bfdcbe24629b045550f35ef10ec289b751710e565c3609f5cbd340dae8cb1eab3b1da121707004fa8b6077ab17b9b317259a9511dfe757270c23b93e07d22a77c6363edf26049eaad77720c836b8c3b60ab30e98bd59a13bf63aeec2a263ab57f70e0c76fdc3d36ed9556b8c96f96f7284c482870d7ebbdfe6ea350e9fad8c364ccdc46a86fd1ddb6fdccad7592c48ca8fb72c3", 0xdb}, {&(0x7f0000000640)="78520a170406fafbfbd1f1f818acc91bc375bf563db97f4571a22090e26f05644cb4e05a07aca62572b9d5495f1617848a8fd1e26ca870d9", 0x38}, {&(0x7f0000000680)="7a928c2363abdc9a8f0cdd23491e74aa45435148c5dc125d4486af14947638835c122a402f7fa3a90666323aafed2f456058c9daa1e06d247ea51ab992c6d3bf3ab3f8254c243f6c3b509c3f7dbb2f4843b4939d1e99a2e26d46a2d961a9a8991f5eaf8451f1bdf3d578bdd216a1", 0x6e}], 0xa, r0) 09:15:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0045878, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) stat(&(0x7f0000001580)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x541000) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz0\x00', {0x4, 0x80000000, 0x3}, 0x32, [0x3d1, 0xfffffffffffffffb, 0x1000, 0xfffffffffffffffa, 0x1, 0x3, 0x2356, 0x81, 0x8000, 0x7, 0x2, 0x0, 0x5, 0xad, 0x9, 0x1e7, 0xfe, 0x698, 0x1000, 0x10001, 0x400, 0x7ff, 0x20, 0x6, 0x101, 0xfffffffffffffffa, 0x4, 0x5, 0x2a0, 0x1, 0x80000000, 0x9, 0x5, 0x2, 0x8, 0x1, 0x0, 0x58c9, 0x5, 0x1, 0x80, 0x8, 0x1, 0x4, 0x81f, 0xffffffffffffff1b, 0x7ff, 0x9, 0x1, 0x4, 0x47, 0x6, 0x6, 0x2, 0x3ff, 0x3, 0x6ed0f62, 0x401, 0x0, 0xf1, 0xe780, 0x3, 0x800], [0x8, 0x40, 0x6, 0xf83, 0x7ff, 0x8, 0x2ac, 0x153e, 0x7ff, 0x800, 0x8, 0x9, 0x6, 0x8000, 0x1, 0x8001, 0xfffffffffffffff9, 0x4, 0x4, 0x27ee, 0x6, 0x1, 0x9, 0x4000000000000000, 0x4, 0x7, 0x43, 0x3f, 0xe90, 0x1000, 0x96, 0x3f, 0x1, 0x6, 0xffff, 0x7, 0x9, 0x6, 0x3282, 0xfffffffffffffffa, 0x4, 0x4, 0xeda2, 0x6ded30b9, 0x2, 0x100000000, 0x1, 0x53a, 0x2, 0x100, 0x6, 0x4, 0x40, 0x40, 0x8000, 0x8, 0x180000000000, 0x4, 0x100000000000, 0x4, 0x400, 0x80000001, 0xff, 0x3], [0x0, 0x5, 0x5, 0x3, 0x8, 0x5, 0x3, 0xffffffffffffff80, 0xffffffffc3473b0c, 0x3a, 0x9, 0x9, 0x3ff, 0x93, 0x7fffffff, 0x9, 0x0, 0x5, 0x0, 0x2, 0x7, 0x8, 0x3, 0x7f, 0x877, 0x5, 0x3, 0x1f, 0xfe, 0xfff, 0x4, 0x80, 0xf2, 0x7, 0x7, 0x0, 0x2000000000000000, 0x7, 0x0, 0x8, 0x7f, 0x2, 0x3, 0xff, 0x3, 0x9, 0x1, 0x8, 0x80, 0x8000, 0x1, 0x0, 0x40, 0xfffffffffffffffb, 0x5, 0x1, 0xd637, 0xfff, 0x4, 0x8, 0x5, 0x1, 0xfffffffffffff827, 0x3ff], [0x8, 0x8001, 0xfffffffffffffff9, 0xfffffffffffff000, 0x3, 0x3, 0x3fe000000000, 0x6, 0x1, 0xfffffffffffffffd, 0x7, 0x0, 0x78, 0x9, 0x8, 0x1ff, 0x2, 0x1, 0x7, 0x7, 0x1, 0x4, 0x6, 0x0, 0x4, 0x1, 0x1, 0x6, 0x4, 0x5, 0x4, 0x934, 0x1, 0x8, 0xfffffffffffffffb, 0x10001, 0x40, 0x401, 0x6, 0x1, 0x20, 0xda, 0x400, 0xe400000000000000, 0x0, 0xfffffffffffffffb, 0x4, 0x6, 0x6, 0xa2a, 0xc8c, 0x7fff, 0x5, 0x2, 0x9, 0xfffffffffffff001, 0x1000, 0x5, 0x8c, 0x0, 0x2, 0x8c27, 0x100000000, 0xc4]}, 0x45c) r2 = gettid() ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000180)=""/170, &(0x7f0000000100)=0xaa) wait4(0x0, 0x0, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f00000013c0)) tkill(r2, 0x20) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000240)='\x00', 0x0) 09:15:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:25 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0xb39, 0x9}) keyctl$setperm(0x5, r0, 0x80010) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, 0x0, 0x357, 0x0, 0x0, 0xfffffc4c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f306766c744240043c200006766c7442402000000006766c744240600000000670f0114240f20c06635000000800f22c0666166b9800000c00f326635000100000f30bad004b060ee0f350f20c06635020000000f22c0d9ec0f01d8", 0x6a}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:15:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:25 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:25 executing program 1: r0 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="c509814ba96790b13a1b51b36a2e601533f4f2684e3ddc2e2437fd2b20724f63a2c7d4d58d2a7bcf71682e0d3552540e4548ab43557b003681906160bf1fee1bc124b692bb651356440b213cb704e4543d411b84d29eb857552e5e060413bc286593b4311f527ce71c960dc370905a9fef2150ea27787b504e7d752de85e176d0b6b0f396a43767bc4d364ed386dca9e663ec0f179a7b8ba7228", 0x9a, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000200)={{0x5, 0x240, 0x7f, 0xeb, 0x5, 0x80000001}, 0x1}) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:25 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xeb, 0x1) write$sndseq(r0, &(0x7f0000000240)=[{0x2, 0x7, 0xffff, 0x9, @tick=0xd6b8, {0x8, 0x4}, {0x8, 0x7fffffff}, @time=@time}], 0x30) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x0, {0x0, 0x989680}, 0x40, 0x7}) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/69, 0x45}], 0x2) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x400, 0xfffffffffffffe00, 0x7fffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x156, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 09:15:25 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x9, 0x2, 0x1000, 0x3, &(0x7f0000000080)=[{}, {}]}) request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="e2d67bcece0a4d86", 0x8, 0xfffffffffffffffc) r1 = add_key(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="1e5398b25ddb052c77cd9171c5aaccb6a9e14eca893e7e9de9e8c91981ad734ed35515e05b5a997607d3c1b24fbd57ff4755d3c04a837882aea54dfb78680021f94b62c1d85a10169214131506f48c2816cdd378da55f87fd96f9397ff5ac4563675b8b4e4e4bbb255f183c9f9cada4f110e0779df2bccd1963092c9bed489b613dace526a96869be8c213f0e92b38795b5680b467f94db889feb7850047adb6bb0058ac21e48d4aca63ffe4b3a40da9734b45188ba3f318c15b2df8d9af468f50cab328109db3909cf6bc73de61d02912ebcd3e957cf6b2ce9fcfe69ef1269671d1465bb6efd20e", 0xe8, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x10000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r3, 0x801, 0x1, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) keyctl$describe(0x6, r2, 0x0, 0x0) 09:15:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:26 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:26 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x2150000) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x602) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x81) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xeb, 0x1) write$sndseq(r0, &(0x7f0000000240)=[{0x2, 0x7, 0xffff, 0x9, @tick=0xd6b8, {0x8, 0x4}, {0x8, 0x7fffffff}, @time=@time}], 0x30) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x0, {0x0, 0x989680}, 0x40, 0x7}) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/69, 0x45}], 0x2) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x400, 0xfffffffffffffe00, 0x7fffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x156, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) [ 285.232704][T11632] binder: 11626 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 285.232718][T11632] binder: 11626:11632 ioctl c018620c 200001c0 returned -22 09:15:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:26 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x2, 0x80000, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000180)={0x2, 0x0, 0x200f, 0x0, 0xffffffffffffffff, 0x7d, 0xac2, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x7, 0x8, 0x2, 0x800}, 0x14) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0)=0x3f, 0x4) 09:15:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0189436, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:26 executing program 1: request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='.\x00', 0xfffffffffffffff8) r0 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000280)=""/86) 09:15:26 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc020660b, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:27 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000002c0)=0x9) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2, 0x0) sendto$ax25(r2, &(0x7f0000000080)="2e987867fbcc6510ead4e5581e7e4974e8609057bbe87885e308d541091aa002fc342e89d7f8c4f9d7cc25ada434792587f4", 0x32, 0x1, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_emit_ethernet(0xe4, &(0x7f00000001c0)={@dev={[], 0xb}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [], {@mpls_mc={0x8848, {[{0x101, 0x8, 0x7ff, 0x50d68679}, {0x1, 0x4, 0x8, 0x3ff}, {0x3}, {0x800, 0xc05, 0x6, 0x8}, {0x8000, 0xcd, 0xfffffffffffffffd, 0x8}], @ipv6={0xfffffffffffffff7, 0x6, "56a565", 0x9a, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="a598d4b515c379460b742aaa971e63b0", {[@routing={0x9, 0x8, 0x0, 0x6, 0x0, [@mcast2, @rand_addr="32161bf1128a52fdd1983ef8f2d3371a", @rand_addr="d6915d10685a4475bd2973b864b4892e", @mcast1]}, @hopopts={0xff, 0x2, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x6}}]}], @tipc=@payload_mcast={{{{{{0x32, 0x0, 0x7, 0x3, 0x6, 0xb, 0x3, 0x2, 0x400, 0x0, 0x3, 0x3, 0x7, 0x1, 0x1000, 0x8, 0x2, 0x4e24, 0x4e24}, 0x3, 0x4}, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:27 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) getsockopt$inet_dccp_int(r1, 0x21, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7fffffff) 09:15:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306209, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x2}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:27 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x9, "25312ef027c7bd1d8529652b1bb1affbf920fec7ba7ef0ce1d1c9a1dd0d50f87", 0x2, 0x2, 0x3, 0x20, 0x102, 0xc}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04910000a27172f38ca54c623d86e511f824f9000000000000000000"], 0x1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x9}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 286.303365][T11696] binder: 11690:11696 ioctl c0306209 200001c0 returned -22 [ 286.330402][ T26] audit: type=1804 audit(1555406127.617:57): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir270269121/syzkaller.a2Z4Ok/168/bus" dev="sda1" ino=17029 res=1 09:15:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306225, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 286.387900][ T26] audit: type=1804 audit(1555406127.657:58): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir270269121/syzkaller.a2Z4Ok/168/bus" dev="sda1" ino=17029 res=1 [ 286.497595][T11711] binder: 11708:11711 ioctl c0306225 200001c0 returned -22 09:15:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x4}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x2, 0x6, 0x400800000001}, 0x14}}, 0x0) 09:15:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0xc}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x280, 0x0) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x4}, 0xb) keyctl$setperm(0x5, r0, 0x2000010000) unlink(&(0x7f0000000180)='./file0\x00') keyctl$describe(0x6, r0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) r3 = gettid() ptrace$pokeuser(0x6, r3, 0x101, 0x8001) 09:15:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306262, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x72, 0x10202) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000200)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000540)={@local, @multicast2, 0x0}, &(0x7f0000000580)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@mcast2, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1b0, r1, 0x21, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xd5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4814}, 0x8c4) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0xc, 0x6, 0x11, 0x0, [{}, {}]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) [ 287.008737][T11729] binder: 11721:11729 ioctl c0306262 200001c0 returned -22 09:15:28 executing program 1: r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10002) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @ipv4={[], [], @loopback}, 0x3f}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={r3, 0x6, 0x0, 0x100000000, 0x86, 0x3}, &(0x7f0000000300)=0x14) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x4000800) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000005c0)) [ 287.063703][T11729] binder: 11721:11729 ioctl c0306262 200001c0 returned -22 09:15:28 executing program 0: r0 = inotify_init() ioctl$FIONREAD(r0, 0x541b, &(0x7f00000002c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xc) 09:15:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xff03}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306263, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x100000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="d8000000374bac4eb26f54fcd4a9fafa8efb000878ff895a4130108f772682e7647a4da3b1da9147cef2dd42f36d07d475f6c603e0ba9d912ad335be5a991f920ecaf2889944971a9b9401d9ce86238a407e12a028edbac7e3a5bda1e8a1b74b4e7d18da334521be4946573de291a7b88160b4066560233128028a88631b7a477dcbda4c54b33825d117d55ee475690aa977314c3c5bb577e8957433c928e9cfa4fbb6827a85504ff090c1ec716bcac3b728b66786afaeaca1e4962da7706a777be04606718e53599aaab49687e2ed76df"], &(0x7f0000000080)=0xe0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x9, 0x0, 0x8cc, 0x9}, &(0x7f0000000240)=0x14) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 287.266791][T11747] binder: 11742:11747 ioctl c0306263 200001c0 returned -22 09:15:28 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x5}}, 0x1, 0x84, 0xff, 0x90, 0x1}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4, 0x3}, 0x8) ioctl$TIOCNXCL(r3, 0x540d) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 287.386507][T11756] binder: 11755:11756 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:15:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x40000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x26a) 09:15:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x7, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x10003, 0x8000) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0), 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000003c80)={0x0, 0x0, 0x2080}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x80, 0x3, 0x0, 0x101}, 'syz0\x00', 0x1d}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x541d, &(0x7f00000003c0)=0xb) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3ff) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x246) sendto$inet(r4, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) accept4$unix(r4, &(0x7f0000000440), &(0x7f0000000140)=0xfffffffffffffeee, 0x800) r5 = mq_open(&(0x7f000084dff0)='.seli\x00\x00\x00\x00elinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x2, 0x1, 0x5, 0x200000000000}) mq_timedsend(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r5, &(0x7f0000000080), 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x80000001, &(0x7f0000001bc0)="0adc1f023c123f3188a070") 09:15:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @remote}, {0x307, @remote}, 0x10, {0x2, 0x4e24, @broadcast}}) keyctl$setperm(0x5, r0, 0x10000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @empty}}, 0x8, 0x81, 0x1000, 0x33, 0x8}, 0x98) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0xffff}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180)) keyctl$describe(0x6, r0, 0x0, 0x0) [ 287.838742][T11781] binder: 11772:11781 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:15:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7b0020}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x100000010000) keyctl$describe(0x6, r0, 0x0, 0x0) [ 288.011296][T11793] binder: 11790:11793 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 288.038694][T11793] binder: 11790:11793 unknown command 0 [ 288.052830][T11793] binder: 11790:11793 ioctl c0306201 200001c0 returned -22 09:15:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000d500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080014000000000008001b0000000000"], 0x30}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 09:15:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x62, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 288.224540][T11809] binder: 11806:11809 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 288.247786][T11809] binder: 11806:11809 unknown command 0 [ 288.253508][T11809] binder: 11806:11809 ioctl c0306201 200001c0 returned -22 [ 288.309467][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:15:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xf0ff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000d500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080014000000000008001b0000000000"], 0x30}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 09:15:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) [ 288.708290][T11828] binder: 11818:11828 unknown command 1661665280 [ 288.721737][T11828] binder: 11818:11828 ioctl c0306201 200001c0 returned -22 09:15:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x1000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:30 executing program 1: r0 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='keyring\x00', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) 09:15:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 288.811116][T11827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:15:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 288.991980][T11844] binder: 11843:11844 unknown command 6490880 09:15:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x2000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 289.033962][T11844] binder: 11843:11844 ioctl c0306201 200001c0 returned -22 09:15:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"24c6dbcf08e382ae47ba666b4b7cb444"}, 0xff, 0x4, 0xc9f}}}, 0x90) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x200000c0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x628, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000174, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) listen(0xffffffffffffffff, 0x0) close(r3) ioperm(0x0, 0xfffffffffffffff9, 0xffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0//ile0\x00', 0x106) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x1, 0x8, 0xfdcf, 0x4, 0xe1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000001c0)={0xb, {0x5, 0x5, 0x7fffffff, 0x5}, {0x79, 0x4, 0x9, 0x8}, {0x1, 0x5}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000002c0)) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x0, "f14c44f740fd1bf2ef49db36cfd7630329895063bc1fd62180c5fc22a2c4480c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000200)={0x5, "dcac3223469aed04481b2871870f57c0797a48afaa9432a5aa337dc145a3c362", 0x400, 0x3, 0x7, 0x9, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400001, 0x0) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='user.syz\x00') 09:15:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 289.557367][T11871] binder: 11869:11871 ERROR: BC_REGISTER_LOOPER called without request 09:15:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/207, 0xcf) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)=0x901) 09:15:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x20007b00}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:31 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7fffeec7}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 289.743418][T11889] binder: 11886:11889 unknown command 99 [ 289.797629][T11889] binder: 11886:11889 ioctl c0306201 200001c0 returned -22 [ 289.850858][T11898] binder: 11886:11898 unknown command 99 [ 289.863020][T11898] binder: 11886:11898 ioctl c0306201 200001c0 returned -22 09:15:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 09:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x628, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000174, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) listen(0xffffffffffffffff, 0x0) close(r3) ioperm(0x0, 0xfffffffffffffff9, 0xffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0//ile0\x00', 0x106) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x1, 0x8, 0xfdcf, 0x4, 0xe1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000001c0)={0xb, {0x5, 0x5, 0x7fffffff, 0x5}, {0x79, 0x4, 0x9, 0x8}, {0x1, 0x5}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000002c0)) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x0, "f14c44f740fd1bf2ef49db36cfd7630329895063bc1fd62180c5fc22a2c4480c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000200)={0x5, "dcac3223469aed04481b2871870f57c0797a48afaa9432a5aa337dc145a3c362", 0x400, 0x3, 0x7, 0x9, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400001, 0x0) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='user.syz\x00') 09:15:31 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7fffefb0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = getgid() r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffff0000, 0x40800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/14], &(0x7f0000000140)=0x12) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x100}, 0x8) setgroups(0x1, &(0x7f0000000040)=[r1]) 09:15:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7ffff000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x100) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x917a, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:31 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x8dffffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x48, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7ffff000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x2fd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) 09:15:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xb0efff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:32 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4c, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xc0000020}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:32 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x60, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:32 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xc7eeff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x68, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:33 executing program 0: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt(r0, 0x3, 0x920, &(0x7f0000000040)="8b8b56a1baedfc663ad991cf338036c55223da280b97c3e41a8c38aa3137d199e735b967a169d3aa516e006957b0e258ec62557b945107ae47f3559d6bd9b9f9b84a37ce84a44c7bc54369647ab68a43463bf3cbb553af1a63e1ceb93abec3d8f6b4a08b0cb070c0f888038b25931f15e0043adb78358aa5370153028090e643f56e085810e7b0b7193fc909d547d78ddd7c87ff0cb4837a1d0fd13aa8663fe990ff1189ed2b22e382606ac7e39aa4c1801ef1c7236558a979b254ff3729ec154455784d3f5c656244dfd55707d9f57f", 0xd0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xdf1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) listen(r2, 0x8) 09:15:33 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6c, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xeffdffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x97f, 0x9d8, 0x1f, 0x10001, 0xf6}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x101}, &(0x7f0000000280)=0x8) keyctl$setperm(0x5, r0, 0x10800) keyctl$describe(0x6, r0, 0x0, 0x21) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="d63963c45c49219d52ad90bbd358557a179c42fbb8ad077543443b41ef2596630e7bb8e52caa916df0eb35b837c7f55a5ff0686f363e48bb4d305aad20fc4a428978e52f9912847bde1bb0ec65924782656c09990af62c9aa1e6e4362b2939fc04fbd1f3d33ea71f2a04bdbe4141cfbf37f3a3598006ae", 0x77, 0xfffffffffffffffd) 09:15:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xf0ffffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000002c0)) keyctl$describe(0x6, r0, 0x0, 0x0) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4, &(0x7f0000000140)=""/177) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000340)=0x1e) getrusage(0xffffffffffffffff, &(0x7f0000000200)) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000040)="9f62b6c85f2b26590f2cc2083243192318dc5e763c18473b60a5caad85262bca0e0168895f701a70c2608d96987a444481f4267a36a9ad3c93e553d674a35e97a6d5cc1a365d175d9dbc437b32e81d8c2d9b18acf90b413608606e93913d0502eef83b0a5094a2d94165d9efc69c9b2bc9868511e8bde794baad2034f4cf", 0x7e) 09:15:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x74, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:33 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{}, [@netrom, @remote, @remote, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000000c0)=0x48) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@null, @null, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="6fe21748f555a4e52f90f7f34c97a5db3f40a67c67d2e998b82a4d963b0d38ea8a7f75373045b14a3cc5f1def810745f25041c171aadb8d88c073fe3de6d979994d3138e989e66e3a9a60480e2932b927c548ad07775593a45272ca50d8b5267fb61403c4c045a716ff3548accf2dbc79448b8dadc5fac5e42e6beb293585649dcb577982a66d08eeefe298f1415642bf18602052c27db2cfb3f6681520309a6853512e5a3318e155bc38d3646edfe674205db9df8efed3b72083db5dd88a4ffd5dfaaf3896a8aac8329fce16304f3de94ffd988f610c4ccdc9def8d6ad079421368871900a9e86c550946c5abbdefe568487d58", 0xf4}, {&(0x7f0000000400)="b28001c3ad38ec375c5d37cff327b92670d406106d5491941b97142ce350adc5ccd17373db2d4d5e17183ce3726a993542a8c2d011d1bfad35e3a7252a9cf0151dea7de6de557a69e624f6353a9bea1d98a918939585995b93ffceaca45dcc1f9da8fccadea9ed2bee7797e0c37ba8ad2ad32d5ce60daef525114cd040a5a3b53dca5c56a905", 0x86}, {&(0x7f00000005c0)="75db3c0e7748396657fb30f68117fca3c5a2f8e0fda51d5bd234391c5ac96813455468d1bf67e59f05f2f3060c5eb37a667ebe1570c9c4ae2b3cc8c812bf22890c79062f9f797fd37f6776450eed7055b6ee1f74fd5fb1613961a583e170b87759b20eabc39e7604b66d9d011658fb9b2696c8f1e0e4448c2dd527378cce22488fe2fbd158f70a73c7c4573cfa78489cbea116a54a2e931ceff524719dd04dda614b8765853729841331a27fad770b0e61d0b968d27cca7a105c97d5ed2773faa84c3186e838626cab107fcde8fe6a6420298593a1415466a5be8a7e989e8eca751716", 0xe0}, {&(0x7f0000000100)="b14e", 0x2}], 0x4, &(0x7f00000006c0)=[{0x1010, 0x10a, 0x3ff, "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"}, {0x90, 0x11, 0xbac, "3e4976edc6f281efbbd97e22a623df804dc9d55cec4624a4a6c6e81f81de836d508f3818b648ac2d9775690ce8dbc85b61093b99f13542a69ebd4d6ab7fe1072e1012a8bd2c41a3c0eaf31b0eee8fd6f547129413db3814f16965cf31accc35c3d59786517455a16a4c70636ca955904ad701d3453dc7c79d6e8"}, {0x80, 0x0, 0x4, "fb5b1acd979bc2add11ba48b4cb11a3b0ab2c383fb5f210ef980397c7b3a131c65e57878bec9fb6b6a7141bb27a127e22fe2fbd67a235d330bda331ad14945dc50278591978c93c8eea08b5d8c1b3b625a80bd274bde172515d57fc04afde4d3bed1b24c96bc8a178d19f9e2970f59"}, {0x1010, 0x117, 0x4, "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"}, {0x40, 0x107, 0x8000, "4f3245e8c3634391ad0e2e028f424bd9d1ce829956d7f6dffd18c31cbda6b4dc42f5230c44ab82fcdad1b9"}, {0xc0, 0x0, 0x2, "cf4f8ee52329de613f31a42093640868cb547f8ec89fc3c82c8b0f51996ea746a66a1af13c9066218bf57d160dd03e2a06cbf6d03e4ac052d61055cad79c90a77b71e5b40b861ab64dd372da7c1fefa012bdb77fa919207348bc1a1da63064de45eb33cbe5e8d06a02fe0305da024d383e1f561f0753029c49f5f49a312faacf44019d600cf2db13c8ff6c4f011f33395a9b2fe42290d2445461077aed6cee2bc6a69e3797e1856b9878cf7f14"}], 0x2230}, 0x4}], 0x1, 0x8045) mount$overlay(0x0, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)='overlay\x00', 0x800000, &(0x7f0000002980)=ANY=[@ANYBLOB='lowerdir=werdir=./file1,default_pe\x00\x00issions,xino=off,\x00']) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000500)=0x9, &(0x7f0000000540)=0x4) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f00000029c0)={0x6, 0x70, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x48, 0x3, 0x6, 0x2, 0x3, 0x2, 0x2, 0x0, 0x2, 0x1000, 0x3, 0x2, 0x7, 0xfffffffffffeffff, 0x0, 0x4, 0x100000000, 0x0, 0x40, 0x1, 0x69, 0x8, 0x4f, 0x6, 0x2, 0x2, 0x20000000000000, 0x101, 0x10, 0x3ff, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x8}, 0x20010, 0x9, 0xffff, 0x6, 0x6, 0xffff, 0x4}, r1, 0xd, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000002a40)={0x2, 0x70, 0x0, 0xfff, 0x7, 0x3, 0x0, 0x2, 0x1, 0x8, 0x10000, 0x81, 0x1, 0x0, 0x1000, 0x7fff, 0x7ff, 0x200, 0x800, 0x2, 0x6, 0x1, 0x9, 0x70, 0x9, 0x1, 0x0, 0x6, 0x3, 0x40, 0x8, 0x9, 0x5, 0x9, 0x6, 0x7, 0x0, 0x3, 0x0, 0x5, 0x2, @perf_config_ext={0x80000001, 0x5}, 0x24000, 0x1, 0x5, 0xd, 0x20, 0x6, 0x2}, 0xffffffffffffffff, 0xa, r2, 0x9) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x208100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000002ac0)=""/4096) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 09:15:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xff030000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:33 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x20100000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000280)={0x5, 0x8, 0x401, 0x9, 0x4, 0x9}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x2, 0x7, 0xfffffffffffff800}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x5, 0xbbf, 0x8, 0x0, 0x10000000000}) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:34 executing program 0: mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2e2f66696c653000d9c7bef74256cf07b368ca331cfdf64ffec268f10718bf92181cc8ca20283681ba123a08c56fbf2ba9e2c31e91c3d27ca2"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00'}) r1 = dup2(r0, r0) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0xa82, 0x8000, 0x72, 0x22, r1, 0x6, [], 0x0, r2, 0x100, 0x8}, 0x3c) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e0000003800815fe45ae087185082cf0224b0eba06ec4000941000000000018000061c8307ac906da9128647357", 0x2e}], 0x1, 0x0, 0x10000000f}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x100000001) [ 292.662699][T12051] bond0: Error: Device is in use and cannot be enslaved [ 292.694022][T12056] bond0: Error: Device is in use and cannot be enslaved 09:15:34 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x3ce) 09:15:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x300, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xfffffdef}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:34 executing program 1: pipe2$9p(&(0x7f0000000040), 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:34 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 293.241662][T12068] bridge0: port 1(bridge_slave_0) entered disabled state 09:15:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x500, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xffffff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x6, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x3, 0x30}, 0xc) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x40, 0x440000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000200)={0x2, r3}) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x400800) readlinkat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/124, 0x1b) connect$llc(r4, &(0x7f0000000340)={0x1a, 0xffff, 0x8, 0x2, 0x4, 0xf88, @local}, 0x10) syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80000) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000300)={0x2, 0x6}, 0x2) 09:15:34 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400042, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x800}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x40000003, 0x0, 0x1d9, 0x2], [0xc2]}) 09:15:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x600, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:34 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) perf_event_open(&(0x7f00000002c0)={0x7, 0x70, 0x7f, 0x3f, 0x4, 0x6ac, 0x0, 0x3, 0x80001, 0x9, 0xffffffffffff8001, 0x1, 0x100000001, 0x200, 0x7ff, 0x8000, 0xfffffffffffff0e5, 0x6, 0x3, 0x200, 0x100, 0xa878, 0xfffffffffffffbff, 0x2316947e, 0x169, 0x1, 0x56f0, 0xa7, 0x7, 0x6, 0x40, 0x1000, 0x3, 0x40, 0x631e, 0x39, 0x7ff, 0xfb6, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000280)}, 0x8, 0xfff, 0x3f, 0x3, 0x0, 0x8000, 0x101}, r0, 0x8, r1, 0x1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0x10000) keyctl$describe(0x6, r2, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x8000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080)=0x7f, 0x4) fremovexattr(r3, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') fgetxattr(r3, &(0x7f0000000140)=@random={'system.', 'wlan0em1cgroupwlan0,]em1eth0\x00'}, &(0x7f0000000180)=""/254, 0xfe) 09:15:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xffffff8d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 293.492906][T12102] kvm [12097]: vcpu0, guest rIP: 0xfff0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x2, nop [ 293.527946][T12102] kvm [12097]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 09:15:34 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:35 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c6c65315c00e18adfa859077ca8c309b1e6d8ba41be469b92a8300f873194bc7db11aee4fae196e70e4fe3ee04469d9"]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 09:15:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xfffffff0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 293.837403][T12129] overlayfs: missing 'workdir' [ 293.853269][T12132] overlayfs: missing 'workdir' 09:15:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10003) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:35 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7ffffffff000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1, 0xffffffff, 0x5, {0x0, 0x1c9c380}, 0x100, 0x357}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001980)={0x0, @remote, @initdev}, &(0x7f00000019c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a00)={'team0\x00', r3}) setsockopt$inet6_buf(r1, 0x29, 0x25, &(0x7f0000000000), 0xfffffffffffffeeb) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x39) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) fcntl$setstatus(r2, 0x4, 0x42803) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x4, 0x2, 0x9, 0x3, 0x4a}, 0x14) 09:15:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x4000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:35 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x40000, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x5}) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:35 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x2000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x7b002000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x3f00, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = shmget(0x3, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/201) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:36 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xf0ff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4800, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) finit_module(r1, &(0x7f0000000000)='md5sumem1security\x00', 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:15:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4c00, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 294.766084][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! [ 294.777011][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! [ 294.784599][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! 09:15:36 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ff49ef44fdca4541bf59192bb8cd39e47e5115b7fd465888667ec03b104b00cad67eee9eebf150e5c61657ff5a6677be0f88155d188dc8bc28ba69f2a1e198ff9eb07666f7a1a4114cbec8f2c7e4cfe89fe82569ffad42036ba97310fbd1db40e706aac0b392c5c64d721923bcc03739fe6afefa96b0a0da40ba77", 0x7b, r0) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000080)=0x3, 0x4) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000280)="3609621a2fcf6ce8b19f591ebfcfc30a138703774a0ec1923606b908c15e28f7453d4561ddd9b7c1fb5f4ff5c9bd702c9ed6267112513a328405ebaded13fa7029e3329ad98297dcbc3ab61f53dfa5c71db4a8d7060009d69fc17678cfc88a94c2c0e150f17a01", 0x15, 0xfffffffffffffffe) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x40440, 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f0000000240)=0x78) 09:15:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xf0ffffff7f0000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 294.923451][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! 09:15:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:36 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 294.979790][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! [ 295.009883][T12190] Dead loop on virtual device ip6_vti0, fix it urgently! 09:15:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:36 executing program 1: add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r0 = add_key(&(0x7f0000000580)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002c0000004400000002000000122a2a7f18e76d59a3433ceefb749640ac0dcda76bc7a5ab7c5db1de4b3994ebd2d688051c4e9c63b4fb8d6c0026c86d8dded5c5c5d751a3aed3701e194e318a01000000000000001b6b8408a953030f49e464afa20676f23824133db8389b7879a77272a7a39326897c41bbb53b2b17a7e99bc29d6514085d76277206d2fa65ded824026a9919e8adcca6fa78135058c1e0c1030000004ec31063194e2a98068832ed4dc54b58bd48795a3ed973bf268798b3d661d649666496d270f27f48aaab973adf00"/236], &(0x7f0000000240)=""/245, 0xec, 0xf5}, 0x20) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6800, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:36 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x100000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) finit_module(r1, &(0x7f0000000000)='md5sumem1security\x00', 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:15:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x200000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6c00, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:36 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x482040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0xfffffffffffffffe, 0x7, {{0x1, 0x3, 0x5, 0xffffffffffff4572, 0x0, 0x0, {0x6, 0xb281, 0x7, 0x8, 0xaf14, 0xa8, 0x7fffffff, 0x9, 0x10000, 0x4, 0xd69, r2, r3, 0x9, 0x5}}, {0x0, 0x6}}}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffffffff7fff}, &(0x7f0000000300)=0x8) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000680)={0x0, 0x0, [], @bt={0x2, 0x2, 0x80000000, 0xfffffffffffffffe, 0x6, 0x64e4c8fc, 0x17, 0x4}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={r4, 0x4}, &(0x7f0000000380)=0x8) r5 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="f24b7c27bf28271448fcce2b24762174ffd0e2cc2af32bff994ede67d4adc5412e3fd2fb4cc402ddc9ac68b98e5dc8c84ea3c7ac3281565cfedc7adf05fd899aa74ffa85ba78accaa2e67c91761573dda1463787e0", 0x55, r0) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='keyring\x00', r5) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000740)=0x4) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="a70200000000000000000000000000000000000000000001ace938a7514abb9113f6aa906bfc14a26554bd28c85064d496cc3fcb0ee918420a9ecd3663cde9c54e62811914b8c8d04c604e8e376c4aedb49c4560f9722d2e549478a40606"], 0x18) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7400, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 295.765703][T12238] Dead loop on virtual device ip6_vti0, fix it urgently! 09:15:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x8dffffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 09:15:37 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7a00, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:37 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xb0efff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x1000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x2000) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xc000002000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:37 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:37 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0x1fffe00000000, 0x10}, &(0x7f0000000380)=0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1f, &(0x7f0000000200), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x21f) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000003c0)={{0x84, @remote, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x9, 0x3}, {@empty, 0x4e24, 0x0, 0xe22b, 0xfffffffffffffff8, 0x40}}, 0x44) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:15:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xc7eeff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:38 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80785659, &(0x7f00000003c0)={0x0, @ctrl={0x0, 0x0, @value64}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)) r6 = epoll_create1(0x0) ftruncate(r1, 0x630) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') connect$nfc_llcp(r4, &(0x7f0000000480)={0x27, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffff7, "341342191f0b40198502fd39ad2cfa8dee870d095f2affba2b446639dccc3c4f82c5cfc6bdbbed359ced42a62c52dd3984fda3c246efd3b63caeaa2feb4ea4", 0x10}, 0x60) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={0x0}}, 0x40) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="be000000f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3a265ec2b9d7d65dcd96aa4870a067929aa6e38cb187e682b6400000007985043f01b690140a35cba564d9a095f651621f30fdb69da1f1b2ca443afb7c1733376018effed73cec2f5c45db4fe3ab1ed8dd93dd438456d513206ae83f7df29ecc7e433f7e0441990076fa9b432cca9aab13047f0973b2f98f245f293fb30c6f29dc8eabacbe2d830de05bfd028aa6e6d3028a2d68e02562ce172f44d38c659e3e2bb782ba636641"], 0x0) close(r6) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x4e22, 0x4, 'fo\x00', 0x20, 0x90c8, 0x33}, 0x2c) 09:15:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x3000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = userfaultfd(0x80000) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000240)="a8fe5ea759bee42a64bfbf0f8448c0027cf01e6c9defe7b74614cf07050a05229057f7322d4f3fd70428f7760e5258406c57cd22d3274a5f48bb1cdf26daa4c1c6e5348e1043418981ce2453d28cdaa0b1e9049b7b1a4a72c856d2dc38fd9cc2eefb62a76f8408185d1265d83f760887272c78d866e39d26ae66970effca7d771b1fca03b21741adcc740c98cf67e0f1235067d9058b801df6f2aef52593c693092f3799ee5e", 0xa6}, {&(0x7f0000000300)="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", 0x1000}], 0x2) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x3, 0x6}, &(0x7f0000000200)=0x10) 09:15:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xeffdffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:38 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x101002, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0xc, 0x9, 0x9, 0x1b, 0x7, 0x1, 0x0, 0xf1}) keyctl$setperm(0x5, r0, 0x10000) r2 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='syz', r0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000180)=0x1) keyctl$describe(0x6, r2, 0x0, 0x0) 09:15:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80785659, &(0x7f00000003c0)={0x0, @ctrl={0x0, 0x0, @value64}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)) r6 = epoll_create1(0x0) ftruncate(r1, 0x630) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') connect$nfc_llcp(r4, &(0x7f0000000480)={0x27, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffff7, "341342191f0b40198502fd39ad2cfa8dee870d095f2affba2b446639dccc3c4f82c5cfc6bdbbed359ced42a62c52dd3984fda3c246efd3b63caeaa2feb4ea4", 0x10}, 0x60) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={0x0}}, 0x40) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="be000000f8bf9129408c3a5f2a4ae09aa757d4bcc9f458976ea89e1c0a060c51431006d2788b2357516155e3984ca23c3a265ec2b9d7d65dcd96aa4870a067929aa6e38cb187e682b6400000007985043f01b690140a35cba564d9a095f651621f30fdb69da1f1b2ca443afb7c1733376018effed73cec2f5c45db4fe3ab1ed8dd93dd438456d513206ae83f7df29ecc7e433f7e0441990076fa9b432cca9aab13047f0973b2f98f245f293fb30c6f29dc8eabacbe2d830de05bfd028aa6e6d3028a2d68e02562ce172f44d38c659e3e2bb782ba636641"], 0x0) close(r6) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x4e22, 0x4, 'fo\x00', 0x20, 0x90c8, 0x33}, 0x2c) 09:15:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xf0ffffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x5000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:38 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000a40)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x100) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000a80)="2a8539de7e2b4da93fb09fa386e2734a88a564abf57b39d75cc48dd3c042f9361170cac3ddbe170c5964e95e6745f6a318b6a53af7ab36210a131ec76cecaa0e97951ac470ab094f1c62679ecd94d6028e159d25dca29570ceeddaa2e1cdf233d4e735ae252185c755fe9750f13c9aab0d775b412f1fa471d7c1ad3efbfa29d6b72d69cc3301e1b9a7b89f581a8cac1c097a4b7a6b8522aec1ece3c02bf6f0fbdedace1dc530af5671654cad23417f61b806ce", 0xb3) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) connect$x25(r2, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/9) keyctl$setperm(0x5, r1, 0x10000) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x401, 0xfffffffffffffffd, 0x3ff, 0x4b, 0x3ff, 0x0, 0x6, 0x4, 0x333, 0x40, 0x105, 0x8, 0x4, 0x38, 0x1, 0x9, 0xffffffffffffa066, 0x3}, [{0x7, 0x0, 0x2, 0x3f, 0x7, 0x80000000, 0x8001, 0xffff}, {0x6474e557, 0xf6d, 0x0, 0x0, 0x5, 0x1, 0x0, 0x7}], "fae26ef92a82edabb2d5bcd0d76186bd0dfe4fedfa773fbbfd7bb14eed42c6e3973082f92d5f9203c370ec7a6a94fa0774e6e0d1465970e298a6fa3f660b9eca2c6473b1952997cd796da0f0f865644ea9258e724bd4b750e3616c421d2e06f214c6cf489ae7552bb65a44f5f96bdc444b3a94b4a267174ac2622470e744ba0106537620ec0220d73c328f28a0bec31e41b306d90153df661f105e607f7a3420f34b29170cacc3e274a97238c913865b280711593c62ba6c1a3943b2d30ee67057f9086f2d2ca11ac5d4809865c8058de02b01e2", [[], [], [], [], [], [], []]}, 0x884) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:38 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:38 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x7ff, 0x8004, 0x75d, 0x1db6, 0x2, 0x1ff, 0x10001, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x9, 0x3}, 0x8) r2 = msgget$private(0x0, 0x48) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000440)='syz', 0xffffffffffffffff}, 0x30) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x4, r3, r4, r5, r6, 0x0, 0xff}, 0x65, 0x3e, 0x2, 0x707aa1d3, 0x9, 0x6, r7}) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r8, 0x10000) keyctl$describe(0x6, r8, 0x0, 0x0) 09:15:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xff03000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:39 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:39 executing program 0: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x103000, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40800) 09:15:39 executing program 1: accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vfio/vfio\x00', 0x48000, 0x0) r1 = dup2(r0, 0xffffffffffffff9c) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'ifb0\x00'}) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1f, 0x1, 0x3, 0x100000001, 0x1b, 0x7f, 0x401, 0x1, 0x9, 0x6}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') accept$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000009d00)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000009e00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000009f00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000a040)={0x0, @dev}, &(0x7f000000a080)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000a0c0)={0x0, @empty, @multicast2}, &(0x7f000000a100)=0xc) getsockname$packet(r1, &(0x7f000000a140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a180)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000a1c0)={'caif0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000a200)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f000000a300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000a4c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f000000a5c0)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000afc0)={0x0, @dev, @broadcast}, &(0x7f000000b000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000b040)={{{@in6=@ipv4={[], [], @multicast2}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f000000b140)=0xe8) clock_gettime(0x0, &(0x7f0000012880)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000012680)=[{{&(0x7f000000b240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f000000b880)=[{&(0x7f000000b2c0)=""/254, 0xfe}, {&(0x7f000000b3c0)=""/146, 0x92}, {&(0x7f000000b480)=""/151, 0x97}, {&(0x7f000000b540)}, {&(0x7f000000b580)=""/219, 0xdb}, {&(0x7f000000b680)=""/15, 0xf}, {&(0x7f000000b6c0)=""/5, 0x5}, {&(0x7f000000b700)=""/76, 0x4c}, {&(0x7f000000b780)=""/232, 0xe8}], 0x9, &(0x7f000000b940)=""/4096, 0x1000}, 0x4}, {{&(0x7f000000c940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f000000ebc0)=[{&(0x7f000000c9c0)=""/4096, 0x1000}, {&(0x7f000000d9c0)=""/49, 0x31}, {&(0x7f000000da00)=""/29, 0x1d}, {&(0x7f000000da40)=""/182, 0xb6}, {&(0x7f000000db00)=""/4096, 0x1000}, {&(0x7f000000eb00)=""/130, 0x82}], 0x6, &(0x7f000000ec40)=""/213, 0xd5}, 0x3}, {{0x0, 0x0, &(0x7f000000eec0)=[{&(0x7f000000ed40)=""/7, 0x7}, {&(0x7f000000ed80)=""/246, 0xf6}, {&(0x7f000000ee80)=""/39, 0x27}], 0x3, &(0x7f000000ef00)=""/143, 0x8f}, 0x10000}, {{&(0x7f000000efc0)=@llc, 0x80, &(0x7f000000f480)=[{&(0x7f000000f040)=""/191, 0xbf}, {&(0x7f000000f100)=""/135, 0x87}, {&(0x7f000000f1c0)=""/213, 0xd5}, {&(0x7f000000f2c0)=""/221, 0xdd}, {&(0x7f000000f3c0)=""/150, 0x96}], 0x5, &(0x7f000000f500)=""/255, 0xff}, 0x1}, {{&(0x7f000000f600)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000010800)=[{&(0x7f000000f680)=""/146, 0x92}, {&(0x7f000000f740)=""/140, 0x8c}, {&(0x7f000000f800)=""/4096, 0x1000}], 0x3, &(0x7f0000010840)=""/142, 0x8e}, 0x100000000}, {{&(0x7f0000010900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000010f80)=[{&(0x7f0000010980)=""/193, 0xc1}, {&(0x7f0000010a80)=""/192, 0xc0}, {&(0x7f0000010b40)=""/221, 0xdd}, {&(0x7f0000010c40)=""/209, 0xd1}, {&(0x7f0000010d40)=""/31, 0x1f}, {&(0x7f0000010d80)}, {&(0x7f0000010dc0)=""/255, 0xff}, {&(0x7f0000010ec0)=""/88, 0x58}, {&(0x7f0000010f40)=""/56, 0x38}], 0x9}, 0x5}, {{&(0x7f0000011040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000011440)=[{&(0x7f00000110c0)=""/56, 0x38}, {&(0x7f0000011100)=""/226, 0xe2}, {&(0x7f0000011200)=""/64, 0x40}, {&(0x7f0000011240)=""/207, 0xcf}, {&(0x7f0000011340)=""/250, 0xfa}], 0x5}, 0x87}, {{&(0x7f00000114c0)=@nfc, 0x80, &(0x7f00000125c0)=[{&(0x7f0000011540)=""/114, 0x72}, {&(0x7f00000115c0)=""/4096, 0x1000}], 0x2, &(0x7f0000012600)=""/113, 0x71}, 0x3}], 0x8, 0x100, &(0x7f00000128c0)={r16, r17+10000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000012900)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000012a00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000012a40)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000012b40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000013040)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000013000)={&(0x7f0000012b80)={0x44c, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xe8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r11}, {0x1b4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xe1e}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xb8, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7ff, 0x7, 0x6, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xff80000000000000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9b}}, {0x8, 0x6, r20}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4}, 0x10) keyctl$link(0x8, r2, r2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000003c0)) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0xff}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0x2, [0x9, 0xfffffffffffeffff, 0x6, 0x3ff, 0x3, 0xc7, 0x0, 0xff]}, 0x5c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000340)=0x800) r21 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400080, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r21, 0x800455d1, &(0x7f00000001c0)) keyctl$describe(0x6, r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0x1, 0x0, 0x5, 'queue0\x00', 0x7}) 09:15:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xffffff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='SEG6\x00', r0) keyctl$setperm(0x5, r0, 0x10000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0xff03000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:39 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x20000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:39 executing program 1: r0 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='posix_acl_accesskeyring)\'}mime_typeposix_acl_accessem1\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x20010000) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7fff, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x2}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:39 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x3f000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000240)={0x0, 0xe0}, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x48, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7f, @loopback, 0x8}]}, &(0x7f0000000200)=0x10) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:40 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x4}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x48000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:40 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x20000, 0x0) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) keyctl$describe(0x6, r1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 09:15:40 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x6, 0x17, 0x4, "0737037608ee59937248c8fee566ac55d49b434a90d7ead4a49c6529d09f542b99eeeaf10f23ad1a9a995caf190cf97f4e1d478d1bc3b6b6a29a49729197674f", "d366fbba03199cbf732e1b57dd079e8a94fa794259be132b984ed32c6763de12f67c49b2122d3abc82d6062863e9d02f3ddcbc52dc1a4ebd9ff9e484a7ef49bc", "9f9e7ac941e1847f720de42eae0d4c0524a2a998a127a77cb985d83e63ea5e69", [0x9, 0x200]}) syz_emit_ethernet(0x21, &(0x7f0000000000)={@local, @local, [], {@generic={0x88a2, "10ce07cff055b97cf43ffe426bac5727027bd39dc0e4c9a82c32ebfc46bda170ff0e194cbfd700d8cc52f5ad1058e93eaaa43ba40e0542ac3cd5e3e7c9439a2599c5cad6dd77319af61e1363c07b351a8bd8a44ee685322818888d7d8e1a8f48806dbea5c2c60f0c115c6b79565c615720e0fda5f2f270e56c85efa7608a8f05abddefa44fcfa11aea5d278816ea0bb518e6e3c60f7cad01cb5085c9fea7"}}}, 0x0) 09:15:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x800000001}, 0x14}}, 0x0) r1 = socket(0x9, 0x6, 0xe9b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0xda, 0xffffffff, 0x3f}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @local}, 0x100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xffff, 0x3}) accept$alg(r1, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)={0x3, 0x0, 0x2080, {0x1f000, 0x6, 0x1}, [], "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", "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"}) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000021c0)=""/53, &(0x7f0000002200)=0x35) 09:15:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4c000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xff03}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10600, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x9, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x60000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:40 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) unlink(&(0x7f00000002c0)='./bus\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) 09:15:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x40000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r2, 0x1f}}, 0x10) 09:15:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x68000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:40 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000002840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002800)={&(0x7f0000000100)={0x26c8, 0x10, 0xb, 0xa10, 0x70bd2c, 0x25dfdbfe, {0x5, 0x0, 0xa}, [@generic="6af6f290fe6081de304a212ec9a21c390c29a82367851b6f744e9379c6be0822ba0add9046701d1aaa0e8c20c2fef769c9b82b4166073d4c455c6d15e0723754522347c6bef8327af0c055c93276af0ea0ae293c55d7a46b540afd32b782c1dc0d2445a8043475d377af34589c83b00c996b3454488ffd774316869f9f9be62706c8789d15bf3d638bfadcedc14a3fb7ee003ce70974", @nested={0x2284, 0x7b, [@generic="d70dbe4e19350f92d6da29269804cc55c63f6f713e9fa565c6a560775f9ae9b5c1324839df1e1302e6c43cf112e6149137f23d440e181ec668aef0044c380dfce65c3e676c3d9a057e9ba3089e16fe5c9aa7724a92c9ce8669ed79b9b5c7d757e3b0341fec8d8d0e335962cdb7be3a86460f6e942dbd1fe7e71af02ffb37ede8588514355afa68ac686bdc52107853a5f06527a4c2b94600d8f45e429ae3f0defd6646840404c751f2956fa2b37f25eb907e57", @typed={0x14, 0x4a, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x4f, @uid=r3}, @typed={0x38, 0x66, @binary="608aebc4ba5e4cac1857b1e3cd2c93e875740b3e9c82c448859c85690775bc797c298106bcc66b4c5f0ba4ff94ebcca438"}, @typed={0x8, 0x73, @uid=r4}, @generic="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", @generic="4672c840caa1b90a37d5b69a919a04c4df5d3d0e4dc0a517b65fdd64c1be43371f2764cbaaf6e19088b8bed88e51f0b9d945399da0aa134fe5a0d76c8627718e632050fba3f0f1359ec92ef1fbc3f236785303a74826919562fec3053bf682a7ec968bc2a096b02d66dbae9d7f6e3a073e85e4712f0fd43b1d81fa0d720b1de879fe37385ad3f7276caa1c0e9f6550f3e376", @generic="76e5fafb98e1ddecc2244ad2f1ae1aa51b2dfc175b60047cdb3ffe3688d0ee382dce2ba052f5ca0d31e18776300cf7ac0c320d6695685b563f8a7c7956ffba4282b82b05af8bcfb5c2fa5e52a6eba69e73b1a4dbc1092e34b4bbaed488e2ff4aa72bc4534009143a929df7bfd5133923e7eb22ebeab930a10ddc2347c687acbc4711c9743348983bb3110e0e85e8b83798dcb8a1a62be4a27046427b475280c88090f665bc111fc086c40be34d309b1fe7ee447028f438a143b30b57374fca9b0c83922420d066b9d3b13a650a98ec94fff0172d7ffdb091", @typed={0x4, 0x13}, @generic="a043326794e41fc4c7076670ec74c4a7d27248ae7cb56c0c8ec942e7843ac04f56e5dd891a27a99eb1b34bf6ddc9d78ad9aea864bcba1898c4a265b4942667c7c1807254f12d14a287388804f94f7de9369c5c27c4b588f1aae3ed6d79a56c8bbbb4ef5808711acce4a070a9fef1c6c05ca511a49163b54843046a03cf23406d94b774276d4b33fa7f2db8f08398c685684d55e3e302f82a421085a2b8d031031024e1881877eee27dc96cd81fd5cbea79f00646b91a3e89f72dd876bf2e036e95cab6f01f0e4be2d6cb5bce621eb9ddbdce50d51df24f9897825a99ae7a7bc73cc4cbd5fa7d1f77196b5416ba68dbba6200bd989097a219e5ac3916a6760ae3be6ed45f7921437d280cbce42513ea067af133eb40d91dbc64721ab6568c4b302df9e3d6119d0568b07fba78854e69b24b19d713026e2b51e7d845e059dc8dddc5cf3150505346db395a53931b70d4044730bb7992761186d1960cc4217b498a5c42b944a0c3edc14b7edb15d923c17a2a2105e33c7f931ea55b856ba497d2a4ad1eca5c778312cfee5f32671a2a8444e96ff6725df51b2232adfce490d68e91929a2fdc59130eefd64e4393084e398c594faf5d026f77a925ff8197decf609ba03bea65995f05e4286ade7d51813731a24a8664c5a8f04a2c7df71f21a327ce18506b4794f20588bb7f6e7c859834ac6949a1ee1cc004cc33617c1d8beeb073f61511cca716805b507e89f2b84da2ef862eb516dac174c446a99db24ae2240ac600b53fcf8d0ab9dc4c605e277f8084d270adef2d48eccf04bc024d9da51ecf6c1fcb11780c0617e6e6c85c0ed8d93d6eed2a2b2f02d15cb58df8aebf495b75487a974f5eb23ad98d3807f839e5221bfda4f036f90dd07b8a8e6560509a73176007aa1f0be61d45d1f15163357c21ac5256828617901cd6725414c68d81f245c55cc4e79f7197a25abbb1f5330dc0c52deec1f392e205b9d3c4bcbd3874d9f44149a8b8ce1c3c5c4a95a98088a48fbd40b1e07bc84ea749e9926daea092eecbe91771f3b0f8a37077e56e7bb8e8288f1c6d334e4a8d1c47994021264db69c44d14ad1ba660ba38195a0399bf357d82963fc5ccbe6e59f778829f44820bcbb37ba3c1ed52425a34b8fa177ffd003c0e2d817d5d3311f25a13c37e60fd9a346bd499d46a86c4dc0063a59d3bdb5786081d02ab75ba91b26ecc41ffd6fd318bb97ac424ca44c7380f96871711ec1aa4fd6667b66d7297c6f9f4ca8ef5d8584155015e17b01d3ff7680fa4506eaaeb94cbe31371bad8d3638051d16d2ab3fc25ae67c84a6d3d95d6c5531c6e72f366286397580d6565eb1f769396780d2717d981c07e73362b77fa35037aed995e0faef0416462ce537623be1b7cf014d175b483cdc0a0e58ffdb1e96a81bf988d824d7d73be08acfe9cb1bd61d73c9fe51467abb2a4b498d62587cf296ddd42a748643f59481a7d429ddb5c8811637176a54f278654d61f52aeccac8e267a646c957ee5e8241a1e47d1570d0c887c199a3f8d1d832445f6ac537a7e120aab36ba80e50af06ea8c62697119f467b7765fab65eb5696e2f65e712a77766a4d11b6bc750841c561592665c037c7a30624bb01e5b416d61cbb356533354cecad0716dc0609e8c1c3d0a84ac0ce7b3dfd93a490cd88b9defc4993ba944e1eebe673e0831800c8d3a6afd6d6aaba22e22a74a67892d7ceb30cd03409998b85a1405fb9b8939995c1f71e2d7087fb2edf9c0e292f54124f0bc16637cb55a70cd3093236ca39079b935f9125e91bb190eabde1870acb6a9c34ffc82a41816e7692ce69fd0c110ca8aaeb3edc70671150b7529a0c9f4d7b843e3d3976f06539ff5e2a97bfbcfa12332a45c92a43d235b35a501547d8b823d776f43551dd2185e8b537027982cc88ed466692a9f7e27f412141d10121445221fad8a5f26e0cf3ae94a0536ab6848f4f53f2addd4411a200a05f96327278adc27ee4367d4c080bc7681b06f4bfc1c78d2dacefed558bd57283d2bce1ba22c35286076c3df60bc609d411bb491cf04e58e39558f3afe081123ee95547f93fb0ad0b204bfb4a57a4239354483550c8683e4a1ae4f9b07939d72d909ee53ecde4ae773cf9f12ce708f574e686bde27c134387276ef46e045ac523a5b472f92420831f39326a835570e356d1ec18e99104df1d0a5626db38eba7dd12a1da7aa42e138fdd4ef65b14b848fe90e87a078e5192ca6b2271d82b47f0ce6078af1b0537ee3e389ec9056168decf54d9ee6baf8f5eb800c31e1cf8f7a25c7f3553c0fc87b23890f4f50174d5161ef66c4587653ae7a3a2accfcf23d574c5cbb8bdbfa8fdf59cb4e7d7c90ed9846746a5608960d730031fc8b492bdd8d44e29b4a9ed919afad18c16b524fc6cf51d363d64ef0ad2c93d126ad5ae0fff2dc14b7066af0846e53adaf4ca1d2656eb604f9f11bc0181750e6446b0bc811e4729b710491b05de3f5a054f4a2de6c5258534a77aeb47b6a57247e544b2fb6246f3088a178a6b35f140d1bb2889bc2245ab9786378bfaedf32ace1009143d77530dcb7765abc05fb8eced3f5fc067be8ce83dcc596e133aef0bae0abf7e564397e40db917ce19de5d5331a3eec680381af9019643e822a0ca4dcf5e87e4b7f2529bb1dce3b9d64cc45d802a04a08b6e8971c57c4165cca4319e776c645c12c48c68b8020b9303e97924dd189d340922349f5d8b75b8d1db273a66df2ba9ffc234d47d8e7e18ac384d243871a5d518a58e0b50a33675757fe16064360e97a33e8e37ee385fa9422ccca2e204d8e2a1be94ce14b526eb3f5799d7e8b738dcbf27f74af682118a6ac4ff5a45e193b9c84887632faccf0be2920beb4af3a4d5025948f74115629dae9a3cadde85db4f78053658ae51a707d8c4198699c46a080ace602e00de7f763ba7f81475ca5a61b9600ba75501c82d13ffaad2d0e7efd8f93feb1d86220b2752c2b12b049f37a6864cb77e6bca9c94e25c6584c12511f220455cc0ad74906708a6c0048039e2dd559a492388c9c575beb569cfb3a7063d8b324c9c139ff6e593df340fed6dc778155bc31c50330a9ae495b4e4474ef1c87cf9f194180ca77befbf1960d92fe58d12de9189ad6cf92ea80bf04de8578d9ecdbb010d41a36433fd28b871555937826cb95c84a433c0c4e329cf6e4eb1d4fcb816846087d174cfe834f44ebfbf8046b5448e3ef0560b72619ac71f22fa7450929d96b117d89a61a5dd649801ff17a142f8767f34a6056c7078d74e17b334eb4fa5c681c81500af4ebdfef37a64e1915ff52eb0ce129b81f7b1b65c5a2687dc7f018ac3b79f1ccd0c5359b0221a14d69e1ec420c5010d53def834f91049513209cd3fc009825407cad39d3740eaaecd1565f0f446e5ff8a54fcd08e15894e1f55a8a7149bee7586d476a1570e13676dfb181b89696c0e0a2082eae219acec1ebbac40d0d66802237842e8e5873514710197f3f32b5bf4c91bba0de9bf61149c7f647942659125d07a6c687077edf8190d562cc689820830d72ec630deb9b64a47f8221587afc6c3ae5c4ead87ebe6dd1eedb6e1ebfc8a45aa106f5a2eeb698009ea180ccc6e6fb8abaebf0090c8d08cf621a8e6554e4e0fe0863ec8ce0f96bbe0d03064b7944f47993c1ab953f096d6a9e374da37ef003f06e795e6aab340a1b856402532e09c0545f70bfb3eeedf4f240764b97087abff60173ea3a3c7f0172fe6150636279ebced1aa6127feb98ca383f25ed11b08a2dcbe35a36fbaaf2b89b7594f1d2c65b3a314c1045596fea08806150fd16641c89857e49723efeec60ace736a1ab749461ccd2adef825053726a732bac9a72fce480dec7aa0b992834b75d58a167bcc2fc6fdbbe8d23a13e6936c888020c2b07e385e33b1c187d2b834c59f3406680689b100b3db39ea531cba60a1573489149ab59624195fb78b463d71081ceed92787a05c470488a13787b5e9b73c678c69c17c39cfba8571e679d48f72eea8ab9814b3799f89322069203753d55d4987758337068ab696b28ec4eec2d43fbacacbee874fa3655a62bfaf6e54794307c3e52fda00d172ef6b33f72edbbb97c920ae850dcc4af40a3ba693210a5654aac3b940e34c469bec6b3d6e76ffec1ee02125fd8eacad7d49add3c52aeca2662036e4753ebe7a96b6be14c6a090a25089d323228dcdf2e6c8c53d48a7e7108fba3b9c7725a00ccbe38d4835c40a933342eef7ac6b71d150794ba663d9aa7529e86664617f9406ad31772c19412dedd24f181b2db5a273b4a2f7feb279c67e25cac758a881efbed57608ac4ec78e6daebdb4bb5c1ee4248c9cb10e9b5facb03ad29e15c933412ad30a99eaff7e0d8ded9589e9616832c0d72954f3774f475beb86c93e9597afec9d64cd851d9fb9852dc835f3b068fbe15325451050b3ba20f2ff836f169f8e35464400fab03e0fe54609febf7feab600da7f7c640359395a20ecbe11ac9d71a8d7e503a764903400a1ddefc822d4b4f7ebdae5d8980cbe4d9f8dd035265c080b18288db7ef5a8eff05842a0748d4bf7e3e8594b3070726dc49590483193401a83d2337c6b047094773e234175b58d00134ba9d19ebb9c659745e4b91c46aa115410b2877202b32f992465e2a178630985c443027a41f563dbf3890d0a385aa49979481cdf980ed3098ed041d6575bcbeb6fa8b4fd2e60a392755ed82f35a0b6ec5362f444a113526c6b69ebdecc6ff39fd0d1e808e6c069dbea055f821bfabf4925f0c0d383cee7b52539d42ffa64b8b1677c7da4f7e3110b9b6ecd0a9469d15411ab09b5dd1cbd70fcc270b1f72e692bdf77b88b0a9f54c5cc263b03bb9aa60865c65e63882dc27f2cc74d2c5263cfadaf84e23deb865815a294372ff396f6b8e9e59bac76ae0edf86a49cebc65ff6d557ad82d1643d3d206d97959d149a6225d99b98be1d2b2be957a079990e57f05a268c9daf7baad6de237ab750aa79f6bfdafe80b90eba5e539a584391071081e6efeeefd921cdd9929d93ac368c600d74f1a5906d834c1a6c7926bb36e618891026cd1da65e0917cfac4798b33158278924432c103dd893d7c165d99fe752b5be810dc831df4865f1f2d1b002d70cdac7b742927c1bc49e8ecc6cb73bdc43350979a4dbe870ebb144629bc35d4df5520f12f1406a1cddbefce7e6238ff9d7b29a1f2195beafa81f6b9ade1e04e509db99d57d27b06ce27d2e1e6bbd5287e7a7199db5fed358fdec7becc0b1a6a7502ca6f988d6bc3984d9349801d03ebfb2ac290c3beba7e718bd3dd8bd9606e4a9b45a15675985b263919ebf598e944974a80a1d9fdbce51b3ce3ab538ba437028e56eab6103e6b2bcb4f3bc20fde49cf9f8b36e37870184f29457319daaa95287c2036eca6de58110bd31d53d073a818443f5ce3cd600dff110b0fcc1584e76019b5b43a2392217f28056f2eebd4d40316b7233f5e2e7ada370d8bc7a821f49f9a7c6710880cae40fe28a56d4732866e1929e0bb9bdd4727ea09217da77ef9681dcaf52958473f743f43f15a3721ab819e0c2b8c6ee6fcac070345bbf16582fafc406fc136636d202158bd485bdeb74d8a9ac6bbd860d71d5bd68337eedd84c4630cc0a5e8881a140b212b4c1f0ab0b5f029422772ccda04a8f74a3660c64a79006bdd415f0c8c3a589baff486e8d344ed594d2cef3642407285ec5fa5c492ef07c0dd07c0363fc1433fa0202650ca640d694f38d9eef6d0ad15788f34ff17b93b1e29809e3feaf93d21afccd897108485c1a"]}, @nested={0x198, 0x74, [@typed={0x8, 0x4, @u32=0xfffffffffffffedc}, @generic="665cc2e8e052b4ccedd0a4d1aa3f67c737f04671b4aff0a20bf70a30ff0c8a30cbe096b461e1a298bea1801e030b0088745683449b2640208ceb1ab8d3105e081f91027d6f3be27d0e12a087ad57a373e0a30406e4d72c475e98319a345ffdabe56e4514c445467f38f4075d848894f84e9f60effd3aa1d2106389d4eab9ca1b8250aa71e546f86d528414ad781e3da15d6f148663e249ab5f47765bc6f5053c592a26df69d4", @generic="1023981e4d539710e8aa11f97f5f46a23547c9824de431d6091ac2cf4f5c61e88f20bbb3a80c5dd3e7d01dc949d773473f6a5958310ea327bdbe1e84b0cb166cd1aad792d36e1bbda372820b764f35b45def8457ff25907eeec7bd6c364ca8fa45909f0bb8cb8f8bd50723ebc7047181e18dc4ce8fdb60c0eb5e7ef9b534e2366328a8dba85e11f2cf4e61224663b255ef77bd253e8c84cc6a25c01a9b0631303ce7db11228760a37bd5a5b69153d5fd64048e44fb98d4de52d6fae8cc85cfb73754ac1c53a8f752acdf4e948f2a5561c34adcd0adef768bedaa19acd1ac2073a27b64"]}, @typed={0xc, 0x3, @str='ppp1\x00'}, @generic="2027db75d2ad091b93a236721f24b5005f273a45a0a7a3876ee5a9550ac12c40bc53689807f035040a68c5b75b9a2b62a314794b51f19c13fa44e1ab5fb46b5f6709484a96ea2203bce2d065bdd99faae491d40f4c7371a026d1f2452008bdf0517541756f9b565e1323eae0a12e150d8bbf43c0d03261dcf5479205185e0c6620c8", @nested={0x14, 0x2b, [@typed={0x8, 0x7c, @ipv4=@multicast2}, @typed={0x8, 0x18, @u32=0x5}]}, @typed={0xa0, 0x68, @binary="4113712ee9fb8cbb0ec8110c988d5c3678c9eebc6664b6f76b5d40a5a235afcdabc3cfc525c38baad86f91c6c26754b8a68374d7e96040303627e8f7e1e14ee7d03563cc0f314540edf2380b8d5b4f75aae26fdcfab0127ad8d64c4e0119470fc206b8fa87260bb2a1190ca14c2ed69570ca0a244673eb808b1fe0988fcb6a32ea030fcba1ac51a23ada00998edf537f81761c7b0c15f9bf44"}, @typed={0x8, 0x17, @fd=r2}, @nested={0xb8, 0x70, [@typed={0xb4, 0x3, @binary="be5681c4bfef4099b818a69b636fc0d4b63d8ba5dda537c4d2041f284e8e931c311af0fcb1fb3b117531f3363e92df9a4e7c4ead31c3b32363312cd0c008192e0dd1985e28f1caa0686f4ae18e8bb64d281e81d30510e1bfd29160f6a667c308b7c3579d389814020754c3c489507efcdcdf223367043ea90c83bb24a4bc40debba5f4ef6a43fd17b87543264b828794e97dd86e9f068c745402cef1d04ce1461e2375f2696c71fc0a86ebb2a066a3cd"}]}]}, 0x26c8}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040000) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 09:15:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6c000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = msgget(0x0, 0x400) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000140)=""/242) 09:15:41 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7b0020}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x74000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:41 executing program 0: r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0xfffffffffffff9f9) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 09:15:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xf0ff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:41 executing program 1: r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="3dcfe0cc619025785c4bd79d17576ca17453fba4003d819f1ba17510f0349cca56e30b44aaaf4dea3c9014258d093a8ec635d3fb644b88a8f3690cb60bdd9e61601f84b6fc34eab32dd95c36b261a636a8af2a60fc3055dfd0e0db7cd0c4c8c1fdb1d3ee4bb1273dc7b90e2144317e352d0ceeac927ff9e123be171aa45b70f7114e542c7496a28c2c9f9fc2ebb014ca011992ae3d149e1f83a8fc556df0307b73fb73139119b663eda9e80893e31b43385ca61bf2d5ed32de6d4b3a81a8fefb", 0xc0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:41 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7a000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x8041) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/109) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x1, @dev={[], 0x10}, 'ip6erspan0\x00'}}, 0x1e) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_team\x00', @local}) 09:15:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x1000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0xfdfdffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0044306, &(0x7f00000000c0)=0x40) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:41 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x41) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x2000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:42 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0xfffffdfd, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x20000010002) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6c92b6fcc1f4932f47f5ad13cf9ba96715d48a7a9ac55d393223d490acdb165e3a84172410336c52902dc1e869863e569c2bc8275278b6b3f75f1ba6561b448f951659ce65ae70f82b1f5ef62f401ed1c88d047a30616a78fff0ab2ead278a4009405f1062d3bbedf93843b67f60cb95a7a01551c5d3748735881c070be994d2638a5991ce40e2f835623255427093777bc6d1db1ae49dc5085efa9ac8ee290b1356c4e4c9ef8026e34cb071848dd08b752cda954d0615b3d10a9bed44", 0xbd) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@int=0x2, 0x4) 09:15:42 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x200000c0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000240)) syslog(0x3, &(0x7f0000000140)=""/247, 0xf7) keyctl$describe(0x6, r1, 0x0, 0x13a) 09:15:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x20007b00}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:42 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x200000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7fffeec7}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:43 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x17, 0x0}, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) r5 = geteuid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="024f633fd89c5ddc0cb08ac8ea21fa93f10c099b505346c5676e14fa01c5f8d5fa03fb77b109ba47f46a9400d1ef35a833a1", 0x32, 0x1}], 0x40000, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x101}}, {@gid={'gid', 0x3d, r1}}, {@file_umask={'file_umask', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r2}}, {@part={'part', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r3}}, {@creator={'creator', 0x3d, "1f396737"}}, {@creator={'creator', 0x3d, "2f3db073"}}], [{@fowner_lt={'fowner<', r4}}, {@euid_lt={'euid<', r5}}]}) 09:15:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x300000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:43 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) fstat(r1, &(0x7f0000000140)) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x7fffffff, "c97e8b5aaa582bbb034fa0e53aebc7ec4f6897d2010e5377e6025d0906775d0b", 0x3, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffd) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0x69, "ff30c6e32949cf20f001ef8a56903a0a580e020558e43daa0be346fa92f4454007dd8c95bb30ecd590d1a0fffd109199814ba53552b2a2492747e91577ee6b42bd2d61de9ec8d96cbdf1de455c015849876aa91b6b1226cb50d943037ac08ce0daba4d8014e32172b7"}, 0x6f) request_key(0x0, &(0x7f0000000780)={'syz'}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x21) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0xc) lstat(0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x20000000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) mknod(0x0, 0x5c279bd58d2b0cfe, 0x0) 09:15:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x400000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7fffefb0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:43 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x600102, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000240)={{0x3, 0x6, 0x6b5, 0x1e, 'syz1\x00', 0x7f}, 0x5, 0x0, 0x4, r1, 0x1, 0x1, 'syz1\x00', &(0x7f0000000100)=[')\x00'], 0x2, [], [0x1ff, 0x10000, 0x2, 0xf6]}) r2 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='ppp1\x00', 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) keyctl$setperm(0x5, r3, 0x10000) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth1_to_bridge\x00', r4}) r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="e95aa83cc23b8adaec2349286e8dd232a1d388a73709909efbc5c78503dee19d1f6e0594ae63c9075d755d67c6c5dfbbf67e44a5685672fc746dfca2e38b348c2c5b11acf039e7a8bc8a1af46f33e0f365a792a5bffe173d08", 0x59, r3) keyctl$describe(0x6, r5, 0x0, 0x0) 09:15:43 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x500000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x7fffffff, "c97e8b5aaa582bbb034fa0e53aebc7ec4f6897d2010e5377e6025d0906775d0b", 0x3, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffd) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0x69, "ff30c6e32949cf20f001ef8a56903a0a580e020558e43daa0be346fa92f4454007dd8c95bb30ecd590d1a0fffd109199814ba53552b2a2492747e91577ee6b42bd2d61de9ec8d96cbdf1de455c015849876aa91b6b1226cb50d943037ac08ce0daba4d8014e32172b7"}, 0x6f) request_key(0x0, &(0x7f0000000780)={'syz'}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x21) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0xc) lstat(0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x20000000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) mknod(0x0, 0x5c279bd58d2b0cfe, 0x0) 09:15:43 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x40002) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7ffff000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x600000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:43 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180), 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') write$P9_RREADDIR(r1, &(0x7f0000000080)={0x2a, 0x29, 0x2, {0x101, [{{0x32, 0x2, 0x6}, 0x3, 0xffff, 0x7, './file0'}]}}, 0x2a) keyctl$describe(0x6, r0, 0x0, 0xe0) 09:15:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x700000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x7fffffff, "c97e8b5aaa582bbb034fa0e53aebc7ec4f6897d2010e5377e6025d0906775d0b", 0x3, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffd) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0x69, "ff30c6e32949cf20f001ef8a56903a0a580e020558e43daa0be346fa92f4454007dd8c95bb30ecd590d1a0fffd109199814ba53552b2a2492747e91577ee6b42bd2d61de9ec8d96cbdf1de455c015849876aa91b6b1226cb50d943037ac08ce0daba4d8014e32172b7"}, 0x6f) request_key(0x0, &(0x7f0000000780)={'syz'}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x21) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0xc) lstat(0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x20000000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) mknod(0x0, 0x5c279bd58d2b0cfe, 0x0) 09:15:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x8dffffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:44 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180), 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x2000000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={r1}) prctl$PR_GET_CHILD_SUBREAPER(0x25) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) gettid() getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3, 0x6c, "7cb275c73bde3d05b3721b8df139f319302f6bddd47e0bfa0481301d44ce0d7eb8d0e7710730dc5f7e720de87e4318e3cd87e1d215928c62a625e1360ce70ce515ab781e6fba77ee4d6240aa25240450186e9759676802966955f4d8b28a43e5b41a43b53fe8b931494fc81a"}, &(0x7f00000001c0)=0x74) keyctl$describe(0x6, r0, 0x0, 0xb8) 09:15:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xb0efff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:44 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180), 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x7fffffff, "c97e8b5aaa582bbb034fa0e53aebc7ec4f6897d2010e5377e6025d0906775d0b", 0x3, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffd) write$UHID_INPUT2(r1, &(0x7f0000000340)={0xc, 0x69, "ff30c6e32949cf20f001ef8a56903a0a580e020558e43daa0be346fa92f4454007dd8c95bb30ecd590d1a0fffd109199814ba53552b2a2492747e91577ee6b42bd2d61de9ec8d96cbdf1de455c015849876aa91b6b1226cb50d943037ac08ce0daba4d8014e32172b7"}, 0x6f) request_key(0x0, &(0x7f0000000780)={'syz'}, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x21) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0xc) lstat(0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x20000000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) mknod(0x0, 0x5c279bd58d2b0cfe, 0x0) 09:15:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x3f00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:44 executing program 1: r0 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="58e17525b3dba2e53fced16bb1d9976e021bc83ef59df669f17fde15b684ed80334e775374", 0x25, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4800000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xc0000020}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000000)="0adc1f123c123f319b70") timer_create(0x0, &(0x7f00000005c0)={0x0, 0x1d, 0x2, @thr={&(0x7f00000001c0)="cec3c0fef820a894e26cd72497a34ac79bbabc27a9068f513ead258f6dc6f659ccfb3eff233c4703a2cb68894b81d1f46137910392b79c33d5706fa8218e57839c52dfca2b154a6e3c263fdd5dea5441cdfa5065b3fa6837fda5264ff8314cd7b15a043be6c1cb9a9ecf98be3b59b08a1e34b1720fb63f42b014e4100e9a7ff588d1a6b9cb9b10bc10f620fd983bd35fae453b", &(0x7f0000000300)="d5489a90f400a8e6510f4fa9827ac4a138d6a3e575e1260d584c0e7f466968b8502e04afbdd37c5547bb37a0b6c28d994ffccb4f9e5800949935488c2a3cc55020847bf77d541ba32985f88b503dba54acaaa82ede90953c0f9747c0ea8c699cf00167f573fa16c2d434236ab55a5b797911cdc02f395a81cb52a45f5d424a9d55fa4785b5fe6b81b8c2b506fc79550be42d1a171ae2804c0c525a2444c669cd57b315c896b8638e844bb4ed186cbde037b117f6e32602b396226fa04703fb0fedfcfe6c534e275296d854c103bc14807fd147573490ea6280727cb3ffb85a1fa745caf79c820ea3f8d904632399b9b6eb01b8efe30355bfd8"}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x6, 0x87, 0x83, 0x0, 0x7fff}, 0xa6, "35c2763ecf1f45b13df91e0908114f1c979f0e38a004a231f81a32457992304194126db0c8f49b64a2ec8faf8c75a0e693afe03186deeb4106168a3282af8b9d0aa3edbd28feee46c9aa24f665529acb5829216b47018bbec8c14f541e6d7a9e426438fd59466cd564e1962a5b0a66d49491fefa23b04e4597213b9b0b8c68e73b76292833a3550d8461afab49d50f5937763bd3cf412ce8c25f8c0d0854da6ff490a155b73b"}, 0xb8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/11, 0x2}], 0x10000000000000dc) 09:15:44 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(0xffffffffffffffff, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xc7eeff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:45 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(0xffffffffffffffff, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10002, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x4c00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x204602, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x5}, 'port1\x00', 0x80, 0x840, 0x10001, 0x2, 0xffff, 0xd17a31f, 0x3ff, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f00000001c0)="d331d3e2cc77f450d7672b8f281650234736e3ceb38a6ab4b1f04da18f706643442bdeb268b21db992e69c9c3cf051e03a9ba8f3908a42d66944eab9ab6767c10392338e7fdeb1124f0f7b05fb129205bda9c1076b0450137d0b0bc080c4f3574765e62f9f3f23a3a3d068d590eaf1711a319310e9adc2a3d1bd7e6ce7a256e0bc4c6dbbb222f4a22249103281e703df9759109666b65056eac07228980592ad4374cbf35c05cc54576fd70a26f30ff30b01e9e15a72c8b6168b8cdc9b521ae7e43a99a43a1bbae645d4b64f93a7ad7df132a388b311ac354773") ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000003c0)) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x5000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x4, 0x10000, 0x9, 0x1, 0x6, 0x6}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x1) 09:15:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xeffdffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:45 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xf0ffffff}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:45 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x8000, 0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x10000) keyctl$describe(0x6, r1, 0x0, 0x0) 09:15:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6000000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0xfffffffffffffe6c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x3) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:15:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x6) 09:15:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xff030000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:45 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(0xffffffffffffffff, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "b829"}, 0x3, 0x1) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) close(r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 09:15:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6800000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='vboxnet0eth1\x00'}, 0x30) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x100000001, 0x57, 0xfff, 0x6, 0x0, 0x30, 0x8000, 0x4, 0x8, 0x4, 0xd48, 0x8, 0x7, 0x7, 0x4, 0x5199, 0x100000001, 0x0, 0x2f, 0xffffffffffff4d0a, 0xfff, 0x4, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x7, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x40000, 0x9b, 0x4, 0x2b5de119, 0x0, 0x712, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x2000, 0x1, 0xff5f, 0xf, 0xc2, 0x1f, 0xfffffffffffffff7}, r1, 0xffffffffffffffff, r2, 0x3) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @rand_addr=0x8}}, 0x0, 0x2, 0x0, "a557f696c7216cc798370062eb0328a52ebacd389e3ef1bad71ddf4b0564d4fa0fa6afff5f8e08271f726278709a140634509f56e997b75632c31b628f7152dfb0a6fd23b210423af2389a9deda42569"}, 0xd8) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x3f00000000000000, 0x13, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c) [ 304.731160][T12809] FAULT_INJECTION: forcing a failure. [ 304.731160][T12809] name fail_futex, interval 1, probability 0, space 0, times 1 [ 304.758319][T12809] CPU: 0 PID: 12809 Comm: syz-executor.3 Not tainted 5.1.0-rc5+ #69 [ 304.766525][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.777124][T12809] Call Trace: [ 304.780549][T12809] dump_stack+0x172/0x1f0 [ 304.785183][T12809] should_fail.cold+0xa/0x15 [ 304.789828][T12809] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.795739][T12809] ? skb_segment.cold+0x33/0x33 [ 304.801419][T12809] get_futex_key+0xba3/0x1660 [ 304.806397][T12809] ? unqueue_me_pi+0xc0/0xc0 [ 304.811275][T12809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.817617][T12809] futex_wake+0xf9/0x4d0 [ 304.821982][T12809] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 304.828313][T12809] ? get_futex_key+0x1660/0x1660 [ 304.833871][T12809] ? __lock_acquire+0x548/0x3fb0 [ 304.838825][T12809] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 304.845064][T12809] ? __lock_acquire+0x548/0x3fb0 [ 304.850440][T12809] do_futex+0x324/0x1df0 [ 304.854827][T12809] ? __lock_acquire+0x548/0x3fb0 [ 304.859849][T12809] ? __might_fault+0x12b/0x1e0 [ 304.864766][T12809] ? exit_robust_list+0x2c0/0x2c0 [ 304.869881][T12809] ? __might_fault+0x12b/0x1e0 [ 304.874842][T12809] ? find_held_lock+0x35/0x130 [ 304.879664][T12809] ? __might_fault+0x12b/0x1e0 [ 304.884660][T12809] ? lock_downgrade+0x880/0x880 [ 304.890239][T12809] mm_release+0x33d/0x490 [ 304.894627][T12809] do_exit+0x417/0x2fa0 [ 304.898808][T12809] ? get_signal+0x331/0x1d50 [ 304.903643][T12809] ? find_held_lock+0x35/0x130 [ 304.908445][T12809] ? mm_update_next_owner+0x640/0x640 [ 304.914176][T12809] ? kasan_check_write+0x14/0x20 [ 304.919112][T12809] ? _raw_spin_unlock_irq+0x28/0x90 [ 304.924407][T12809] ? get_signal+0x331/0x1d50 [ 304.929102][T12809] ? _raw_spin_unlock_irq+0x28/0x90 [ 304.934453][T12809] do_group_exit+0x135/0x370 [ 304.939045][T12809] get_signal+0x399/0x1d50 [ 304.943854][T12809] ? ___sys_recvmsg+0x5a0/0x5a0 [ 304.948768][T12809] do_signal+0x87/0x1940 [ 304.953111][T12809] ? setup_sigcontext+0x7d0/0x7d0 [ 304.958131][T12809] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 304.964707][T12809] ? fput_many+0x12c/0x1a0 [ 304.969204][T12809] ? __sys_recvmmsg+0x131/0x270 [ 304.974065][T12809] ? exit_to_usermode_loop+0x43/0x2c0 [ 304.979467][T12809] ? do_syscall_64+0x52d/0x610 [ 304.984224][T12809] ? exit_to_usermode_loop+0x43/0x2c0 [ 304.989599][T12809] ? lockdep_hardirqs_on+0x418/0x5d0 [ 304.994978][T12809] ? trace_hardirqs_on+0x67/0x230 [ 305.000210][T12809] exit_to_usermode_loop+0x244/0x2c0 [ 305.005487][T12809] do_syscall_64+0x52d/0x610 [ 305.010083][T12809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.016101][T12809] RIP: 0033:0x458c29 [ 305.019991][T12809] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.039591][T12809] RSP: 002b:00007fb425a83c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 305.048177][T12809] RAX: 0000000000000358 RBX: 00007fb425a83c90 RCX: 0000000000458c29 [ 305.056297][T12809] RDX: 000000000000038c RSI: 0000000020000200 RDI: 0000000000000004 [ 305.064587][T12809] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.072618][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb425a846d4 09:15:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x6c00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x2e) 09:15:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xfffffdef}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:46 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x4000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x1f}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x77, @remote, 0x4e20, 0x1, 'nq\x00', 0x14, 0x4, 0xc}, 0x2c) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/65, 0x41}], 0x3}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000580)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@loopback, @in6=@mcast2, 0x4e23, 0x4, 0x4e24, 0xe90a, 0x2, 0x80, 0x20, 0xff, r2, r3}, {0x9, 0x1, 0x6, 0x4, 0x3, 0x2, 0x837, 0xd3ee}, {0x6, 0xfffffffffffffffb, 0x1, 0x40}, 0xffffffffa39e7401, 0x6e6bb1, 0x1, 0x1, 0x2, 0x1}, {{@in6=@rand_addr="4fb03e554f473a3df360425958467a53", 0x4d2, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0x3, 0x4, 0x1000, 0x7ff, 0x9}}, 0xe8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000006c0)={0x1, 0x2, 0x7, 0x6}) r4 = syz_open_dev$swradio(&(0x7f0000000700)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000740)=0x9, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000780)='/dev/video36\x00', 0x2, 0x0) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000880)={0x2, 0x1, 0x79, 0x822, 0x8, 0x6}) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000980)={r5, &(0x7f0000000900)=""/76}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video36\x00', 0x2, 0x0) connect$llc(r0, &(0x7f0000000a00)={0x1a, 0x33f, 0x1bf, 0x6, 0x8, 0x7fffffff, @remote}, 0x10) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000a40)={0x0, 0x40004, "aa0f817359b8deb98d1da307407c0a57bc8eb78c53ca0dce", {0x800, 0x2a83}, 0x78d3}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000a80)={r1, 0x1, 0x3, [0x394dda0e, 0x3, 0x401]}, &(0x7f0000000ac0)=0xe) getpeername$netrom(r0, &(0x7f0000000b00)={{0x3, @bcast}, [@rose, @netrom, @bcast, @bcast, @rose, @remote, @rose, @default]}, &(0x7f0000000b80)=0x48) connect$inet(r4, &(0x7f0000000bc0)={0x2, 0x4e20, @broadcast}, 0x10) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-monitor\x00', 0x501002, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000c80)={0x0, 0x4, 0xffff, [], &(0x7f0000000c40)=0x2}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000cc0)) socket(0x4, 0xa, 0x6) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000d00)={0x1, 0x1, @stop_pts=0x10001}) r8 = add_key(&(0x7f0000000d80)='user\x00', &(0x7f0000000dc0)={'syz', 0x1}, &(0x7f0000000e00)="8fcb7b666e79d79fe7850787ceaec82ca4ac13fca2de4d0dfd0f1a2bff2cda280847ab88eec5ad16d85dee8651c652ce1334101dcced3ae1c9365e2bc21bdc00a18850575a0b4ad94f5fa781b75326b46361294d6c8d0294baf17b3160e51f3378792b1836052560cf7a21742ff6e4badf23cc8900aee75e37786847f4f805138b0a218ad02b35a6a77dc60091b515db", 0x90, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r8, 0x2, 0x0, r9) 09:15:46 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 305.080592][T12809] R13: 00000000004c5b80 R14: 00000000004da118 R15: 0000000000000005 09:15:46 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x40002015}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x488240, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000100)={0x1, 0x465}) write$uinput_user_dev(r4, &(0x7f0000000440)={'syz1\x00', {0x8, 0xd0a, 0xfffffffffffffffc, 0xff}, 0x25, [0x3, 0x40, 0x10001, 0x5, 0x200, 0x7f, 0x4, 0x10000, 0x1000, 0x93, 0x80000000, 0x9, 0x0, 0x10001, 0x18811f4d, 0x1ff, 0x8, 0x5, 0x759, 0x6, 0x4, 0xad, 0xee7, 0x1, 0x4a3000000000000, 0x0, 0x3b9a, 0x1, 0x0, 0xdf, 0x1e1, 0x91, 0x6, 0xf2, 0x959c, 0x4, 0x4, 0x1, 0x8ac, 0x8000, 0x9, 0x4, 0x101, 0x20, 0x9, 0x8, 0xbb7, 0x1, 0x18, 0x10000, 0x1b, 0x100000001, 0x80000000, 0x3, 0x983, 0x6, 0x7c13, 0x8, 0x8, 0x2f, 0x3, 0x5969, 0x9, 0x9], [0x9, 0x6, 0x800, 0x8, 0x964, 0x1, 0x7f, 0x2, 0xe7, 0x1, 0x5191, 0x3, 0x8, 0x3202, 0x7, 0x74, 0x20, 0x6, 0x1, 0x3, 0x2, 0x80000001, 0x200, 0x9, 0x8, 0x9, 0xffffffffffffff7f, 0x1, 0x8, 0x7ff, 0x5, 0x5, 0x10001, 0x3, 0x6, 0x7fffffff, 0x5db3, 0x200, 0x0, 0x6, 0x7ff, 0x80000001, 0x7, 0x6, 0x5068, 0x6d8, 0x2, 0x1, 0x2, 0x4, 0x2, 0xffff, 0x1, 0x3, 0xb0b, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x1f, 0x1ff, 0x0, 0x7, 0xffffffff], [0xe77c, 0x5, 0x2, 0x1ff, 0x9, 0x2, 0xc00000000000, 0x0, 0x1000, 0x6, 0x10001, 0x8, 0x3f, 0x4, 0xffffffffffffffff, 0x0, 0x7f, 0x9, 0x7, 0x80, 0x4, 0x7fffffff, 0x80000000, 0x20, 0x6, 0x6, 0x3, 0xfffffffffffffe00, 0x100000001, 0x1, 0x6de0, 0xfffffffffffffffa, 0x1000, 0x4, 0x2, 0x80000000, 0x4, 0x81, 0x2, 0x1, 0x794f3982, 0x4, 0x1b2b, 0x9, 0xc9, 0xbae5, 0x4, 0x8000, 0x100, 0xffffffff, 0x8, 0x5, 0x9, 0x9, 0x1, 0x43ad, 0x9, 0xfffffffffffffffc, 0x5, 0xb3c0, 0x8, 0x8, 0x2, 0xa54b], [0x7fff, 0xffff, 0x36c9, 0x9, 0x4, 0x1, 0x4, 0x7fff, 0xc64f, 0x2, 0x10001, 0x1ff, 0x519c, 0x1, 0x7fff, 0x4, 0x9, 0x5, 0x20, 0x2, 0x4, 0x5, 0x1, 0x9, 0x7, 0x46d9, 0x2, 0xb38c, 0x1000, 0x7, 0x6ca700, 0x1000, 0x1, 0x2, 0x40, 0x8, 0x157b, 0x101, 0x5, 0x80, 0x1, 0x69ae2580, 0x2, 0x407d, 0x200, 0x4, 0xff, 0x6e63, 0x475a, 0x7, 0xfffffffffffffffb, 0x6, 0x8000, 0x5f69, 0xc0f5, 0x1800000000, 0x5, 0x75, 0x0, 0x2, 0x6, 0xfffffffffffffff8, 0x17ba, 0x9]}, 0x45c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000005000)={{r5, r6+30000000}, {0x0, 0x989680}}, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000000c0)={0x9}) 09:15:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 09:15:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xffffff7f}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7400000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xffffff8d}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:46 executing program 0: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0xa, 0x20000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x2002) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x73, 0x8000) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x3, 0x1, 0x0, r3}, @map={0x18, 0xf, 0x1, 0x0, r3}], &(0x7f00000002c0)='syzkaller\x00', 0xb7, 0xef, &(0x7f0000000300)=""/239, 0x40f00, 0x1, [], r5, 0xe, r1, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x7ff, 0x92b9, 0x125, 0x8}, 0x10}, 0x70) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0xffffffffffffffff) 09:15:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xfffffff0}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x1, "306a198f87515e3e4191c805efce2e067b6e2b12ff68d5155d1969d45f63b0ea4c0a8182b632312d20ebec745d834f03c8f2ab0e9cd00e76f41d93801208bd70", "970f50a1d02976a42f3153d6d630b94161253ac1b68bc5117bb03897d581b8a6", [0x5, 0x4]}) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) recvfrom$rose(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x20, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x80, 0x8001, {"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"}}, {0x0, "183e239680c6f4732bd496a3ad171fd2117338daca21c2c2fe72e1ede2dbf9b059b22ec87d6ea367068045077063a27f7ec5c7ad2320616556c119020a7abe64d7bc6f87445f87965a26e50998017a"}}, &(0x7f0000000080)=""/60, 0xfffffffffffffd3c, 0x3c, 0x1}, 0x20) 09:15:47 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x7a00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x6000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) keyctl$describe(0x6, r0, 0x0, 0xffb4) 09:15:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0xfdfdffff00000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7ffffffff000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x0, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3d8bb119, 0x400000) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="4d042ba77b155abfeb84dfd3b9f21b8bc58d12437977c8e1457f04288fc4ba70a00b35418bada5e3401fd88a479db670c4d10208e4ff85f37839892b63a753c8826db866e1aa531091e315df5d18aa7045004f6a477f1566d050a007b50ec49efdf4554dec0172c8460a434938efdf64c930dd9f4e913be4df4d96d0bcdf35ad56341af051bba8e790ebcc160c2090de9d25b49e3e7c", 0x96}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='userloem0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x6, r1}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="b37b929ecfb47d246eb390c01edf054a6ad56a3e8bbe120cc9b25a3faeb18a4e0f9d51de4a9fe7a5656db28693beaeb79356c4b5718eea14db8f0d1f18d5044cd14171c6388b2b0af59e820fe2137ce16e14a5e3a0e5583c56711e895fa04e4e7005", 0x62) bpf$MAP_CREATE(0x2, &(0x7f0000000480)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x87}, 0x3c) unlink(&(0x7f00000000c0)='./file0\x00') fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={[], 0x7, 0xd800000000000000, 0x10000, 0x8, 0x5, r2}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000280)={0x5, 0x1, 0xb86, 0x4, 0x3, 0xff}) 09:15:47 executing program 1: getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000240)) getgroups(0x4, &(0x7f0000000280)=[0xee01, 0xee01, 0xee00, 0xee00]) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getgroups(0x2, &(0x7f0000000380)=[0xee01, 0xee01]) setgroups(0x4, &(0x7f00000003c0)=[r0, r1, r2, r3]) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d56440bec89f90d9b049bf81c6ff0ed498fdf92ab60aead2d25ace769f56c37c3f7d9cefbdec890121da1ca57b3581aeab22c475ad8152"]) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000) keyctl$describe(0x6, r5, 0x0, 0x14d) 09:15:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\vc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:47 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 306.277199][T12957] binder: 12950:12957 ERROR: BC_REGISTER_LOOPER called without request [ 306.299165][T12957] binder: 12950:12957 ERROR: BC_REGISTER_LOOPER called without request 09:15:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x4000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000600)=0xd9d, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x80000001}, 0x8, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000180)={"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"}) keyctl$describe(0x6, r0, 0x0, 0x0) r3 = semget(0x2, 0x0, 0xa8) write$FUSE_WRITE(r2, &(0x7f0000000580)={0x18, 0x0, 0x1, {0x3}}, 0x18) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x80000000) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0x6, 0x80000000, 0x70f]) 09:15:47 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x222000) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1a200000) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x401, 0x400000000600000) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000001c0)={0x1, 0x5, 0x7}) ioctl$EVIOCSCLOCKID(r1, 0x80284504, &(0x7f0000ffcffc)=0x100) 09:15:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\rc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:47 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$describe(0x6, r0, 0x0, 0xffffff18) pause() keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r1, 0x6, 0x100000000}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d726177206861621673683d706f6c79313330352d67656e6572696300000000000000000000819342fd14e43eaea8b7a000"/80], &(0x7f00000001c0)="cf86fef8d7213177f844278144095681cd0e11fc2019483367379d388ca662bd8155e671cfce563ac03d3c66e00d19c0413c84f7b44dc14cb4cc875cca345b2e3b09c7a9bdfe3118da52d946a002f936c797ab773885645f046bc5c20967295990fc4cb281e907e8e248d16255c65fb6c33e809171dd48f0daeb57d0ac9ddaf0f48a56b13fb6af2854c74669d9a1dd466843b4ed95f8dd32857be479", &(0x7f0000000280)=""/126) [ 306.672277][T12975] binder: 12971:12975 ERROR: BC_REGISTER_LOOPER called without request 09:15:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x7b002000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000000000000000000080000000300"/28], 0x1c}}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 306.752733][T12975] binder: 12971:12975 ERROR: BC_REGISTER_LOOPER called without request 09:15:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126300000b63"], 0x0, 0x0, 0x0}) 09:15:48 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1a, 0x100000001, 0x800, 0x6, 0x0, 0xffffffffffffffff, 0x6}, 0x3c) [ 307.002312][T13004] binder: 13000:13004 unknown command 25362 [ 307.016596][T13004] binder: 13000:13004 ioctl c0306201 200001c0 returned -22 09:15:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x4, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xf0ff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='bc\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:48 executing program 0: r0 = syz_open_dev$admmidi(0x0, 0xffffffffffffffff, 0x12000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r1 = creat(0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000140)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) getpeername$netrom(r0, &(0x7f0000000f40)={{}, [@null, @null, @netrom, @netrom, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000001100)=0x48) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) statx(r0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000900)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001140)={0xdfb, 0x5, 0xfded8990eea86f26}, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ptrace$poke(0x5, r4, &(0x7f0000000640), 0xe7e) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48, 0x7}, 0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000ec0)) write$nbd(r0, &(0x7f0000000fc0)={0x67446698, 0x0, 0x3, 0x0, 0x4, "f50208cffb6a5b2f62c67774d69fab2fdc64744887abb2de347935dba9dd8e1db7883ab53a906cabe133e17ccebcd88ebbc71be5e3d70600be97da614b0ea9c27b6d20a5e0f5e0b1de3fd77d0bb48e35d4d6307f60311b7b22e6824930b6fba9d89c5610e6c3b67893029d1b66b59f2afc633fa7d2c084c8753904548e768be3f99ddf3197de754bec5e2f744a004a7508ee99a6837d0e0a27546348449f"}, 0xae) 09:15:48 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffffffffffc) [ 307.477059][T13018] binder: 13015:13018 unknown command 25442 [ 307.525771][T13018] binder: 13015:13018 ioctl c0306201 200001c0 returned -22 09:15:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x538) 09:15:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xf0ffffff7f0000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="026304400b63"], 0x0, 0x0, 0x0}) 09:15:49 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) connect$x25(r0, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) sendmsg$rds(r1, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/168], @ANYBLOB="a80000000000000004cf68c82a40fd13d1b3b1a6bf5a334b719452c3c749f94593d42dbce3eb6bcccf9e76ef405031b46bb2d82c7f1e8e0db7d0b77895b5aa4833e7ff10040ac518910b2e9de0121a3343e87c09195685b71aa080"], @ANYBLOB="01000000000000000000000000000000000000000000000048000000000000001401000001000000000000000000000000000000000000000000000000000000000000000000000000000400"/96], 0x90}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x181040, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000100)=0x9) [ 307.782809][T13044] binder: BC_ACQUIRE_RESULT not supported [ 307.793921][T13044] binder: 13039:13044 ioctl c0306201 200001c0 returned -22 09:15:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x100000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:49 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) geteuid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="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", 0xfd}, {&(0x7f0000000200)="e9031f3e688bdcfbc065c2c3befd9328051a82f3851df9081de84333fc9019c16c9d13d1257d51dcce82f9a89b0d0d7e18842954bd14e943e0f9f18cbd023f93fc80307e58f909ccad4a0025382841b7d7c78d918d31f6d75db275cb91484d7efc18a6e18029e34f66bb48968e14a5", 0x6f}, {&(0x7f0000000280)="692d84a572c399f22113b70ea2bdeed89cc87bc26e97386131e9af1aa6f7069eb18fe1902608d7b0e72f7b859c3a3f1b6bb013b640a003dbf7a51fe7ece07de2fe86f50ebf86c113dcaa764aa406803a08b145b8d2e40b8c53f149aabe7380d3a7aad7490c1a03b0e23c7d10141aaba0d03ca352b119f5c68853b0ee40712dd5a80979921042847bf194e8", 0x8b}, {&(0x7f0000000040)="cfab9a7cb76984f5d28941357a", 0xd}, {&(0x7f0000000340)="4c5140cd34ef9689a9ebdf38f09ce54ced94f192490becf071eb8c29b3b45d46187a7cd388507b747b9470ba4c08ee1ab1b6eeb17068651a72a7521e66c08e9730976b063289829d32c454b959cf26e04c79ce91d0d47fffdb03f1c8c590c2b8d3927c2422beff908adaad664326", 0x6e}, {&(0x7f00000003c0)="03f54c2625b4515ae65b0df320d2fe51", 0x10}, {&(0x7f0000000400)="d9704e8720665532a922e81704ca1dd18998d3904a3b0a92446ddb53249e46ae22934ea4add92bd0e485825d886a2b1e00045bf05c20ff63ef680421740dac04761ff202fd19e99552a1ae63ed481c8c59a79b58a22fbfa217aee8062dcbb73ac9c26c8528b89d9edd3ba5c3b8ef8c36378e76db2e5406e4684332b2258d67fc9d5bbe6121700ca48913f94fcf8ee5d5ecb9fa693961ec", 0x97}], 0x7, &(0x7f0000000540), 0x0, 0x20000000}, 0x10) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="046304400b63"], 0x0, 0x0, 0x0}) 09:15:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x200000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3b1be3682ec84108e2d445e0e40f07000000e9e96decaea15273a27690fce5ac746825be07dd5a810d4aeb33d4abd8884795eb00000000000000000000003a5daceb50c030dab4823135c5438a183fdcc5dc40f66a07dc54ca7c9b1a4aa13e5c092a9db06d69681cca684dc7787cd0e701e431cb8b739f5e8cc0e7d6c503117ccdeb799a86a7bc827ad7e53eb7b5cad12bce280fafee8564fb54b7e20215161d001a1091068a15e072037ca86db99cb01309940f0f58b63d546791d8b569813d26b41e9b7d6819d398330b4c91eb04427f40e79e4596444e34a851eb2fdf984b5faf9a2773e300"/243]}) 09:15:49 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 308.319739][T13072] binder: 13070:13072 IncRefs 0 refcount change on invalid ref 25355 ret -22 09:15:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0x8dffffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x4, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x8100000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="076304400b63"], 0x0, 0x0, 0x0}) [ 308.517988][T13090] binder: 13087:13090 DecRefs 0 refcount change on invalid ref 25355 ret -22 09:15:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xb0efff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="036308400b63"], 0x0, 0x0, 0x0}) [ 308.775372][T13105] binder: 13104:13105 BC_FREE_BUFFER u000000000000630b no match 09:15:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x6, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:50 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 09:15:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xc000002000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\nc\b@\vc'], 0x0, 0x0, 0x0}) 09:15:50 executing program 0: getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) getpid() mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000001cc0)=""/4096) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 09:15:50 executing program 1: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x0) r0 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='lo\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x9, 0x20000000000000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000300)={0x1, [0xbab, 0x80000000, 0x7fffffff, 0x7, 0xa1, 0x8, 0x9, 0x20, 0x1, 0x101, 0x2, 0x1, 0x7, 0xe6f, 0x400, 0xb67, 0x3, 0x80000000, 0x9, 0x0, 0x8001, 0x5, 0xfffffffffffffffa, 0xfb, 0x6, 0x40, 0x5, 0x1, 0x0, 0x1ff, 0x7, 0x3, 0x2, 0x7, 0x1, 0x80000001, 0x0, 0x65, 0x85e, 0x8, 0x7, 0x7f, 0xe6, 0x1, 0x0, 0x6, 0x80000001, 0x81]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000380)) keyctl$setperm(0x5, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000280)={0x3, 0x101}) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffffe7) request_key(&(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x1f\x00\x00', r0) [ 309.061472][T13116] binder: BC_ATTEMPT_ACQUIRE not supported [ 309.096456][T13116] binder: 13114:13116 ioctl c0306201 200001c0 returned -22 09:15:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308400b63"], 0x0, 0x0, 0x0}) 09:15:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xc7eeff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 309.269817][T13136] binder: 13133:13136 BC_DEAD_BINDER_DONE 000000000000630b not found 09:15:50 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xeffdffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000a2afe3)="b63db85e1e8d020000000000003ef0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x591440, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() r6 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000980)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000fc0)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001200)=0x0) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() sendmsg$netlink(r1, &(0x7f0000001340)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)=[{&(0x7f0000000180)={0x17c, 0x36, 0x608, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x57, @uid=r2}, @nested={0xb8, 0x10, [@typed={0x8, 0xa, @pid=r3}, @typed={0x8, 0x46, @ipv4=@broadcast}, @typed={0x8, 0x2a, @str='\x00'}, @generic="c03461762c59c18e5868894d569599f12740de5ee283e246964c756740f8a2505b5cdf40d6efcc42f9", @typed={0x8, 0x25, @ipv4=@empty}, @generic="900bf0904c70f7055d588a189651896d485ba42bb35d1be6ac12d789c580dfaef218769b5e16054631bd78712a4af2aee22342d0fd54041e79fb2a1d34ae5e", @generic="fec09e58599687c643b7cac4adea70e8d8bb59023ae1af9d3e598a807dcfaf", @typed={0x4, 0x7b}, @typed={0x8, 0xe, @fd=r1}]}, @generic="b19db31d4920afcec29ac67734626c86e5af510eb2e80133da411ec5345fe6006eabc22e49acce05f4d9332e922fab70412b2b768fbd177f4063094195cad420c26edba97fb7829be93ec3a30b6f7b3835b9e9482ad8d99b7f9ba15a1097f96587a926ac07f2ef310ad80f70d765f89329b4aeb06fa6fb63eca5f3f7083d5ff556ca6de6538bd1195d0d16454511bbe9b2fa2748251600e902ae4c6dee304081188eaf2166f72293cc31"]}, 0x17c}, {&(0x7f0000000380)={0x2b0, 0x18, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xc0, 0x47, [@generic="7d57b3182353084aa2496d0d25aadd7fcdf2940ce25369a6fca401b98102da310df50e9738145551352a305ca3b228e97037d1398f37110d84a6e812d09b6fcc51f0feed81e13240ecf643462c75b31ad42201cd27dc3e0bab1c69d2d33816736cf31808b20bb797a3a6fb5d29d864da492a509a5819610c4e680c2bf0fc013d341a789d3b563f5065b9cce3f4b242c93f279b2b967884338604cb477bcaa2134b3233463302a5fa91", @typed={0x8, 0x8f, @u32=0x5}, @typed={0x8, 0x69, @uid=r4}]}, @typed={0xc, 0x0, @u64=0xde0}, @typed={0x8, 0x4d, @uid=r5}, @nested={0x1b8, 0x4f, [@generic="feaafff77b9fadf7e75f32f6b2e1bccb11bdcc1e0e66905004be87d56a7d4fa79a0ea3241029b061d4bae0bf9693f23823f9a6f228c8007b7e866a81992ff5f3a7a853259d7e4612c9a7557a4f52954c2c4134263eadb10d37a2da9771b7278eca11", @typed={0x14, 0x0, @str='/dev/cachefiles\x00'}, @generic="0407098bdc4a05a6e94fa3e72d9911c343493c7c160963a7b2409b03769ebcd2c0cc962322dcfb12bdc9a41a4a5ee3e93a3701cd74b2d140b19346c0f4b1405a756db53eb8926d053af33df9ecbf1a3827206631382a3ca0a973243892337466496dabf3356d55a783dfa27d2c2c7d22f732d63bd62dc438ab46ba5f", @typed={0xa8, 0x7a, @binary="9bb52e16018625fa7a214f5038d6fa415345289ac7a5c808f90eeb9d6e97b635465588c120c71057e3d6292b25acd662c0a739cf92c674be9af7a5d25c979e92153cf84e46b5592f458d7324dde1d31b811b7c9365e1298b5f2b50823908c605e96a6af42198c4d01fac59ee2563407ec2f918560e61a5e57e29b2aa50630a41f2b2e7b2d195b48e879c5e5771af88804bbf27eb2ad4f423a7a9fb589f8db2403abf4a65"}, @typed={0x8, 0x8c, @ipv4=@local}, @typed={0x8, 0x57, @ipv4=@empty}, @typed={0x8, 0x15, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x14, 0x8e, [@typed={0x10, 0x10, @str='/dev/sg#\x00'}]}]}, 0x2b0}, {&(0x7f0000000640)={0x204, 0x3d, 0x0, 0x70bd26, 0x25dfdbfd, "", [@generic="9e46a99c7eee5dd27ded70e331f8b915d1572dc05451f633672aa99b3eea9d3d02af1104b09d3d12183df6b71c5c6e95c39664d7e9c2f6e3f5d7d84e784fc4c65dc1b4d8f541aa6a39ef398217d16b4f3f4975bdb6d947b83c861a673470ecc7e0d48a56a6f02f30ef2637e01c4cb0edaa819c3dbbc07e7568fe05976496a5b5fbb388a2", @typed={0x8, 0x5d, @u32=0x2}, @typed={0x8, 0x5a, @fd=r0}, @generic="76cd477a9eb2575995b40f9cfab6b2b5e2963410a9ebdb49a35c809a80c73b7dcab418848462c65e2cfe0c830de3542494b7168bdd870bef7ae48f7c5a374a77a31c6d26afee073786d8db65844f9d3f8f43db5586f1953eb1364b3c9a2c3e9530df535e1ae6d972d0ab3b731e7e35dfa01e09342c1565eaf2abd66ef2a6d4ec8f55e1ba832e5da4ca520f63232f7077165b715c91737f6ee57a96be", @generic="41b85b09bffecd11b910849533aee3d4cea92ab19539920fd5a4679919579049ba6ac40eeeaf42fa90cb4202fc16b4cfdae276f41587e566357bbfa13c14c0448d58c669e06c55d829a53f67f65c1a7396aa2e759673f9434d011a008f30fe3afe3ca79ea1082b08af2a6760bf390aa8dbc8c74f808265b741c300a83035be86d1613b845a73e9699d43bcb28efb25acbaa67d5e68e78fa4b91014b0dd18c271dbc0f20f873b660856afa2d0b9504e5af2219f740cb4622e41f7d13d45ebf8fd0d"]}, 0x204}, {&(0x7f00000009c0)={0x220, 0x3e, 0xb20, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x2d, @pid=r6}, @typed={0x30, 0x51, @str='security\x9ecgroupmd5sumvboxnet1\\md5summd5sum\x00'}, @generic="b67f80b8d560522e29e8777abf160421166ca42b0a2d9f391864e1de92133127a0235ded971c10d1d757a965428860c3612cb0781e8f2bbdb9db286fa0701f01ade87ccf18eb6cde7047afbcf280e55a45b123175fd84d8619de33326eb77eb1728bee22e04d591e", @nested={0x10, 0x15, [@typed={0x4, 0x53}, @typed={0x8, 0x96, @uid=r7}]}, @nested={0xdc, 0x19, [@generic="e4", @generic="5eb6cd2f0f4be883314f8020801f67337ece96c0e16628d72aa004ae4e3c00056546ba4878176bcf2ac97da038a7c08f945c19fa593701e57b37612a4532a911c2303bb995a4dc221144af74c462c0122eb79db1009ded2cca9c745d4424cea1722b8f4452f8031678cc5c7a99327fba37f63a6e51cfaa8f", @generic, @typed={0x8, 0x30, @ipv4=@broadcast}, @typed={0x14, 0x7, @ipv6=@remote}, @generic="340d523d0e918885522036a9b110828de4693143fd282ab273cbe1302855d57d65195bee0256f3c1aa26843e6417a806aec31d621a626c99e879fd68", @generic="8daf9c9daf72"]}, @generic="64d277cdb25d6c56e06be9bf5421d1ac4ef32721937c199f5b84c832bc7fa7b3980ee89c78764d7fc59f37a3f68270101c28c475cd0e72bb1a695b2a34f8a229aeade9070fc32044937e74d9a3d804971cb08ce9b54557b507167398c6725df0c93e8a549bd60287659a5fe551340e1a6c731a2473ed045e56c0bf669b0b7789ad406d"]}, 0x220}, {&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="140011002f6465762f636163686566696c6573000400720008008100", @ANYRES32=r9, @ANYBLOB="0800010093ff863385c90d66dc2c4080cabeadd66197c676c9dcf30f03f248eb75f2d5d0509c1ac6dda805", @ANYRES32=r10, @ANYBLOB='\b\x00a\x00', @ANYRES32=r11], 0x14c}], 0x5, &(0x7f0000001300)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x20, 0x80}, 0x4000010) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x23}], 0x1) 09:15:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c400b63"], 0x0, 0x0, 0x0}) 09:15:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$sndseq(r1, &(0x7f0000000140)=[{0x2, 0xfffffffffffffff8, 0xf98, 0x1, @time, {0x1, 0x3fffffffc000}, {0x6, 0xffff}, @queue={0x1, {0xbe1f, 0x4a3}}}, {0x9, 0xc3, 0x1, 0x9, @tick=0x21, {0x100000001, 0xca}, {0xc63, 0x3}, @queue={0x8ff, {0x40, 0x3}}}, {0x7f, 0x0, 0x5, 0x3, @tick=0x1f, {0xfff, 0x3}, {0x151, 0x6}, @raw32={[0x0, 0x4, 0x1]}}], 0x90) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xf0ffffff00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:51 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 309.785316][T13160] binder: 13159:13160 BC_REQUEST_DEATH_NOTIFICATION invalid ref 25355 09:15:51 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x4345, 0x7}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x43, 0x10000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0x7ff, 0xffffffff00000001}) 09:15:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000a2afe3)="b63db85e1e8d020000000000003ef0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x591440, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() r6 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000980)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000fc0)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001200)=0x0) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() sendmsg$netlink(r1, &(0x7f0000001340)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)=[{&(0x7f0000000180)={0x17c, 0x36, 0x608, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x57, @uid=r2}, @nested={0xb8, 0x10, [@typed={0x8, 0xa, @pid=r3}, @typed={0x8, 0x46, @ipv4=@broadcast}, @typed={0x8, 0x2a, @str='\x00'}, @generic="c03461762c59c18e5868894d569599f12740de5ee283e246964c756740f8a2505b5cdf40d6efcc42f9", @typed={0x8, 0x25, @ipv4=@empty}, @generic="900bf0904c70f7055d588a189651896d485ba42bb35d1be6ac12d789c580dfaef218769b5e16054631bd78712a4af2aee22342d0fd54041e79fb2a1d34ae5e", @generic="fec09e58599687c643b7cac4adea70e8d8bb59023ae1af9d3e598a807dcfaf", @typed={0x4, 0x7b}, @typed={0x8, 0xe, @fd=r1}]}, @generic="b19db31d4920afcec29ac67734626c86e5af510eb2e80133da411ec5345fe6006eabc22e49acce05f4d9332e922fab70412b2b768fbd177f4063094195cad420c26edba97fb7829be93ec3a30b6f7b3835b9e9482ad8d99b7f9ba15a1097f96587a926ac07f2ef310ad80f70d765f89329b4aeb06fa6fb63eca5f3f7083d5ff556ca6de6538bd1195d0d16454511bbe9b2fa2748251600e902ae4c6dee304081188eaf2166f72293cc31"]}, 0x17c}, {&(0x7f0000000380)={0x2b0, 0x18, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xc0, 0x47, [@generic="7d57b3182353084aa2496d0d25aadd7fcdf2940ce25369a6fca401b98102da310df50e9738145551352a305ca3b228e97037d1398f37110d84a6e812d09b6fcc51f0feed81e13240ecf643462c75b31ad42201cd27dc3e0bab1c69d2d33816736cf31808b20bb797a3a6fb5d29d864da492a509a5819610c4e680c2bf0fc013d341a789d3b563f5065b9cce3f4b242c93f279b2b967884338604cb477bcaa2134b3233463302a5fa91", @typed={0x8, 0x8f, @u32=0x5}, @typed={0x8, 0x69, @uid=r4}]}, @typed={0xc, 0x0, @u64=0xde0}, @typed={0x8, 0x4d, @uid=r5}, @nested={0x1b8, 0x4f, [@generic="feaafff77b9fadf7e75f32f6b2e1bccb11bdcc1e0e66905004be87d56a7d4fa79a0ea3241029b061d4bae0bf9693f23823f9a6f228c8007b7e866a81992ff5f3a7a853259d7e4612c9a7557a4f52954c2c4134263eadb10d37a2da9771b7278eca11", @typed={0x14, 0x0, @str='/dev/cachefiles\x00'}, @generic="0407098bdc4a05a6e94fa3e72d9911c343493c7c160963a7b2409b03769ebcd2c0cc962322dcfb12bdc9a41a4a5ee3e93a3701cd74b2d140b19346c0f4b1405a756db53eb8926d053af33df9ecbf1a3827206631382a3ca0a973243892337466496dabf3356d55a783dfa27d2c2c7d22f732d63bd62dc438ab46ba5f", @typed={0xa8, 0x7a, @binary="9bb52e16018625fa7a214f5038d6fa415345289ac7a5c808f90eeb9d6e97b635465588c120c71057e3d6292b25acd662c0a739cf92c674be9af7a5d25c979e92153cf84e46b5592f458d7324dde1d31b811b7c9365e1298b5f2b50823908c605e96a6af42198c4d01fac59ee2563407ec2f918560e61a5e57e29b2aa50630a41f2b2e7b2d195b48e879c5e5771af88804bbf27eb2ad4f423a7a9fb589f8db2403abf4a65"}, @typed={0x8, 0x8c, @ipv4=@local}, @typed={0x8, 0x57, @ipv4=@empty}, @typed={0x8, 0x15, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x14, 0x8e, [@typed={0x10, 0x10, @str='/dev/sg#\x00'}]}]}, 0x2b0}, {&(0x7f0000000640)={0x204, 0x3d, 0x0, 0x70bd26, 0x25dfdbfd, "", [@generic="9e46a99c7eee5dd27ded70e331f8b915d1572dc05451f633672aa99b3eea9d3d02af1104b09d3d12183df6b71c5c6e95c39664d7e9c2f6e3f5d7d84e784fc4c65dc1b4d8f541aa6a39ef398217d16b4f3f4975bdb6d947b83c861a673470ecc7e0d48a56a6f02f30ef2637e01c4cb0edaa819c3dbbc07e7568fe05976496a5b5fbb388a2", @typed={0x8, 0x5d, @u32=0x2}, @typed={0x8, 0x5a, @fd=r0}, @generic="76cd477a9eb2575995b40f9cfab6b2b5e2963410a9ebdb49a35c809a80c73b7dcab418848462c65e2cfe0c830de3542494b7168bdd870bef7ae48f7c5a374a77a31c6d26afee073786d8db65844f9d3f8f43db5586f1953eb1364b3c9a2c3e9530df535e1ae6d972d0ab3b731e7e35dfa01e09342c1565eaf2abd66ef2a6d4ec8f55e1ba832e5da4ca520f63232f7077165b715c91737f6ee57a96be", @generic="41b85b09bffecd11b910849533aee3d4cea92ab19539920fd5a4679919579049ba6ac40eeeaf42fa90cb4202fc16b4cfdae276f41587e566357bbfa13c14c0448d58c669e06c55d829a53f67f65c1a7396aa2e759673f9434d011a008f30fe3afe3ca79ea1082b08af2a6760bf390aa8dbc8c74f808265b741c300a83035be86d1613b845a73e9699d43bcb28efb25acbaa67d5e68e78fa4b91014b0dd18c271dbc0f20f873b660856afa2d0b9504e5af2219f740cb4622e41f7d13d45ebf8fd0d"]}, 0x204}, {&(0x7f00000009c0)={0x220, 0x3e, 0xb20, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x2d, @pid=r6}, @typed={0x30, 0x51, @str='security\x9ecgroupmd5sumvboxnet1\\md5summd5sum\x00'}, @generic="b67f80b8d560522e29e8777abf160421166ca42b0a2d9f391864e1de92133127a0235ded971c10d1d757a965428860c3612cb0781e8f2bbdb9db286fa0701f01ade87ccf18eb6cde7047afbcf280e55a45b123175fd84d8619de33326eb77eb1728bee22e04d591e", @nested={0x10, 0x15, [@typed={0x4, 0x53}, @typed={0x8, 0x96, @uid=r7}]}, @nested={0xdc, 0x19, [@generic="e4", @generic="5eb6cd2f0f4be883314f8020801f67337ece96c0e16628d72aa004ae4e3c00056546ba4878176bcf2ac97da038a7c08f945c19fa593701e57b37612a4532a911c2303bb995a4dc221144af74c462c0122eb79db1009ded2cca9c745d4424cea1722b8f4452f8031678cc5c7a99327fba37f63a6e51cfaa8f", @generic, @typed={0x8, 0x30, @ipv4=@broadcast}, @typed={0x14, 0x7, @ipv6=@remote}, @generic="340d523d0e918885522036a9b110828de4693143fd282ab273cbe1302855d57d65195bee0256f3c1aa26843e6417a806aec31d621a626c99e879fd68", @generic="8daf9c9daf72"]}, @generic="64d277cdb25d6c56e06be9bf5421d1ac4ef32721937c199f5b84c832bc7fa7b3980ee89c78764d7fc59f37a3f68270101c28c475cd0e72bb1a695b2a34f8a229aeade9070fc32044937e74d9a3d804971cb08ce9b54557b507167398c6725df0c93e8a549bd60287659a5fe551340e1a6c731a2473ed045e56c0bf669b0b7789ad406d"]}, 0x220}, {&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="140011002f6465762f636163686566696c6573000400720008008100", @ANYRES32=r9, @ANYBLOB="0800010093ff863385c90d66dc2c4080cabeadd66197c676c9dcf30f03f248eb75f2d5d0509c1ac6dda805", @ANYRES32=r10, @ANYBLOB='\b\x00a\x00', @ANYRES32=r11], 0x14c}], 0x5, &(0x7f0000001300)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x20, 0x80}, 0x4000010) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x23}], 0x1) 09:15:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f630c400b63"], 0x0, 0x0, 0x0}) 09:15:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xff03000000000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:51 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 310.051058][T13188] binder: 13185:13188 BC_CLEAR_DEATH_NOTIFICATION invalid ref 25355 09:15:51 executing program 1: r0 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="af0137082b30e2a93270dd83550252ac65f91b4baed827323924707af782fd344b1246d465d102a53e61bc939d52054cf8615055894582dc967e53465ac8e9b3f53ab0841b646d264df3ed65efd5e35611af706f0979b47c241083b9cd78465a11085b648ecb932a53be2e30ce85fcd4102310de6e1d2ebdea7010", 0x7b, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x10000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) ptrace$poke(0xffffffffffffffff, r2, &(0x7f0000000200), 0x7f) keyctl$describe(0x6, r1, 0x0, 0x0) syz_execute_func(&(0x7f0000000100)="430f2b183e660fe22c4f13c43ef0470fbb69fe0fba28fc3e2e660f01dec443e17b8606000000bd44d994030e0000000f0fdda6f34190") 09:15:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = creat(0x0, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x804) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x459dcfd22ae372d8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008001100e2ab000009629ccee106390d413414a850c2181e144286fa97bc5ec8dc44ddad3170b247dbb2f5ec161f15e8467f000000bf2cc61f9476623da4b908070ffae5819d4df9ddd51a388a0361017cbb90ffc0cd28844696d13d4b9904ef8875d1fcb01b58536e7b254da9de076caf84c4c1abffd3eb4b0a95d6ee6b0d5b868338afb466c4fb51b23bd02b36cf4f12c34e0a619c28c6bff01e9dc9c7d1d57f207ce7882dbada8fce231c3674901cf90081733c4908de35db4a"], 0x1c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) 09:15:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x0, 0xffffff7f00000000}, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="086310400b63"], 0x0, 0x0, 0x0}) 09:15:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x10000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000180)=0x60, 0x800) keyctl$describe(0x6, r0, 0x0, 0x0) 09:15:51 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x0, 0x0}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:51 executing program 1: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='wlan0/GPLGPL:vmnet1bdevcgroupsystem\x00', 0xfffffffffffffff8) keyctl$setperm(0x5, 0x0, 0x10000) keyctl$describe(0x6, 0x0, 0x0, 0x0) [ 310.456821][T13214] binder: 13204:13214 BC_INCREFS_DONE u000000000000630b no match [ 310.489691][T13214] binder: 13204:13214 BC_INCREFS_DONE u000000000000630b no match 09:15:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x69, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="096310400b63"], 0x0, 0x0, 0x0}) 09:15:51 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x0, 0x0}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 310.661410][T13232] binder: 13227:13232 BC_ACQUIRE_DONE u000000000000630b no match 09:15:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x22000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setflags(r1, 0x2, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0xb0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb1a0]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000002c0)={0x0, 0x107000, 0x100, 0x10001, 0x8}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000080)=0xf8b5) 09:15:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@\vc'], 0x0, 0x0, 0x0}) [ 310.859367][T13244] binder: 13241:13244 got transaction to invalid handle [ 310.918725][T13244] binder: 13241:13244 transaction failed 29201/-22, size 0-0 line 2995 [ 310.991176][ T2808] binder: undelivered TRANSACTION_ERROR: 29201 09:15:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x1c00, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, 0x6, 0xffffffffffffffbc, 0x7fffffff, 0xcb, "559d3a51a90d8dd7974e778a918c0d8a1b08cfbb8d9b087d6d5ec9c432c8f6fe36dd538425f83ddf878de13758dc0a970094a954c2a46e1874bfff43d78f5cd15f09030ba30fd3781b66e28af28f06402ddbaab16b6db7e5954d3377b215ff65a9fcec77f9ad24847ac68c7c404baf10e6f2402a86021117fbade1a40d3db1235cc2827f1dbf6029ea99b795c3468784d3b622454c767c147e127c8831b5883017f0c4bc650c9e637ef61c54c32f8eb691130df6981c2aa2597ebcb02b6283b865562eef59c472b05009a8"}, 0xd7) 09:15:52 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x0, 0x0}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = creat(0x0, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x804) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x459dcfd22ae372d8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008001100e2ab000009629ccee106390d413414a850c2181e144286fa97bc5ec8dc44ddad3170b247dbb2f5ec161f15e8467f000000bf2cc61f9476623da4b908070ffae5819d4df9ddd51a388a0361017cbb90ffc0cd28844696d13d4b9904ef8875d1fcb01b58536e7b254da9de076caf84c4c1abffd3eb4b0a95d6ee6b0d5b868338afb466c4fb51b23bd02b36cf4f12c34e0a619c28c6bff01e9dc9c7d1d57f207ce7882dbada8fce231c3674901cf90081733c4908de35db4a"], 0x1c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) 09:15:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400b63"], 0x0, 0x0, 0x0}) [ 311.156761][T13260] binder: 13253:13260 got reply transaction with no transaction stack [ 311.179778][T13260] binder: 13253:13260 transaction failed 29201/-71, size 0-0 line 2900 [ 311.253192][ T2808] binder: undelivered TRANSACTION_ERROR: 29201 09:15:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0xf403, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400b63"], 0x0, 0x0, 0x0}) 09:15:52 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x0, 0x0}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:52 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 311.539087][T13282] binder: 13278:13282 got transaction to invalid handle 09:15:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x20005710, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 311.611137][T13282] binder: 13278:13282 transaction failed 29201/-22, size 0-0 line 2995 [ 311.696452][ T2808] binder: undelivered TRANSACTION_ERROR: 29201 09:15:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126348400b63"], 0x0, 0x0, 0x0}) [ 311.888547][T13291] binder: 13290:13291 got reply transaction with no transaction stack [ 311.936457][T13291] binder: 13290:13291 transaction failed 29201/-71, size 0-0 line 2900 [ 311.979286][ T2808] binder: undelivered TRANSACTION_ERROR: 29201 09:15:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:53 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = creat(0x0, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x804) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x459dcfd22ae372d8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008001100e2ab000009629ccee106390d413414a850c2181e144286fa97bc5ec8dc44ddad3170b247dbb2f5ec161f15e8467f000000bf2cc61f9476623da4b908070ffae5819d4df9ddd51a388a0361017cbb90ffc0cd28844696d13d4b9904ef8875d1fcb01b58536e7b254da9de076caf84c4c1abffd3eb4b0a95d6ee6b0d5b868338afb466c4fb51b23bd02b36cf4f12c34e0a619c28c6bff01e9dc9c7d1d57f207ce7882dbada8fce231c3674901cf90081733c4908de35db4a"], 0x1c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) 09:15:53 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = open(&(0x7f0000000080)='./file0\x00', 0x410402, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000300)={0x7, 0x0, 0xffffffff00000001, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x81, 0xff}, 0x1, @can={{0x3, 0x401, 0x2, 0x5}, 0x1, 0x2, 0x0, 0x0, "9e3ca553a58715ee"}}, 0x48}}, 0x800) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10001, 0x2) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000003c0)=ANY=[@ANYBLOB="5b0a00000000000004000000000000000100010000000000ce0000000000000006000000000000002380ff0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064d03637c17fd7c87f40000000000000004036709000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000001f00000000000000710080040000000000000000000000000000000000000000000000000000000000000000000000007400000000000000239600000000000008000000000000005c200600"/272]) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x40000000004e20, @empty}, 0x78) r4 = socket$inet(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) 09:15:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f\n\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 312.164373][T13301] binder: 13299:13301 unknown command 2572 [ 312.187063][T13301] binder: 13299:13301 ioctl c0306201 200001c0 returned -22 09:15:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x200000000) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x3a3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0xc}], 0x10000000000002f6) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) write$P9_RLINK(r1, 0x0, 0x16f) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x400002, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000002c0)=0x46c6, 0x4) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f64655358735fb3467c486f2256951e102b3a4b691f72e590bbe19eff0116a78c6959d8537cff73000000da37f9035e1a3ef1c86975f6462c0cf30000000000"], 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f0000000600)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9abea03ef71344b294bf38ae6866b8c250d68fde6dcf0823e239818ffffffffc7d97e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af00806ef4146d8c8e169b93306f68f6214210965a2d8baa9f31a92c149e6cb208d567224eac76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa00, 0x80) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='ip6gre0\x00'}) 09:15:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f#\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 312.394317][T13318] binder: 13316:13318 unknown command 8972 [ 312.424910][T13318] binder: 13316:13318 ioctl c0306201 200001c0 returned -22 09:15:53 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f%\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 312.577649][T13326] overlayfs: failed to resolve './file1': -2 09:15:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = dup2(r0, r0) r2 = accept4$rose(r1, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xffffffffffff0001, 0x800, 0x4, 0xfff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/240) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) [ 312.641860][T13331] binder: 13330:13331 unknown command 9484 [ 312.687240][T13331] binder: 13330:13331 ioctl c0306201 200001c0 returned -22 09:15:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f*\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 312.939758][T13350] binder: 13349:13350 unknown command 10764 [ 312.996440][T13350] binder: 13349:13350 ioctl c0306201 200001c0 returned -22 09:15:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:54 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x84000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc4b1273f777c89bd0e824e9a470e72f7fa0176cd93750b3eaa3d4e9d10f6c67ca8d1a8d1e78570af11c7f85a2c3c3d5caf3578ff0451f37cad9832de4aa5c8509eb2b440679255ab1da0d92a11a7801d7d435f45692855d8495a92286d470c6f6c71e034762929a046508e86bd3842dee0e70c6ecfb76b4589c1e137bd76f9e1124a65c80539f4e8652ba0b2451467ac97a") prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000058", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x7, 0x30}, &(0x7f00000002c0)=0xc) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x6, &(0x7f000025f000/0x3000)=nil, 0x4) 09:15:54 executing program 1: r0 = memfd_create(&(0x7f0000000180)='dh\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$void(r1, 0xc0045c79) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000740)={{0xa, 0x5, 0x5, 0x8, '\x00', 0xa000}, 0x0, [0x4, 0x9, 0x10b, 0x52b0, 0x800, 0x2, 0x15576ab7, 0x101, 0x1, 0xff, 0x800, 0x3, 0x30, 0x6, 0x400, 0x800, 0x100000000, 0x3, 0x81, 0x4, 0x4, 0xffffffffffff04ca, 0xb26d, 0xf1ba, 0x7, 0x0, 0x1, 0xffffffffffff4e5e, 0xe05d, 0x1, 0x20, 0x9f30000000000, 0x0, 0x7, 0x3ff, 0x6, 0x0, 0x6c16, 0x80, 0x1, 0x7f, 0xffff, 0x6, 0x7ff, 0x1b94, 0x6, 0x0, 0xfffffffffffffffe, 0x8, 0x9138, 0x8, 0x4, 0x8, 0xff, 0x8000, 0x6, 0xfff, 0x0, 0x6a1, 0x8001, 0x0, 0x10001000000, 0xfff, 0x5e6, 0x3, 0x6, 0x40000000000, 0x8, 0x4, 0x800, 0x8000, 0x3333, 0x6, 0x101, 0xb95, 0x9, 0x80000000, 0x2, 0x2, 0x101, 0x3, 0x2, 0x6571, 0x1fa, 0x6, 0x7ff800000, 0x40, 0x1, 0x3, 0x914, 0x4, 0x0, 0xffffffff, 0x3, 0xf7e, 0x76, 0xff, 0x1, 0xffffffff, 0x80000001, 0x0, 0x5, 0x5, 0xffffffffffff0001, 0x20, 0xfff, 0x8, 0x4, 0xb8, 0x2920, 0x7c, 0x7add, 0x2, 0x645, 0x2, 0x800, 0x6, 0x2, 0x55, 0x3ff, 0x80000001, 0x3, 0xff, 0x1, 0x10001, 0x20, 0x4, 0x48000000], {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r3, 0x100000}, 0x8) 09:15:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f+\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:54 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:54 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x88800, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000200)={r1, r2/1000+10000}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@generic={0x3, 0x100000000000, 0x8}) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0xfffffffffffffdad, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x503100) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x80, 0x0, {0x0, 0x2}, 0x1, 0x0, 0xfffffffffffffff8}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x20000005) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000580)) socket$packet(0x11, 0xfffffffffffffffd, 0x300) r5 = socket$inet6(0xa, 0x7fc, 0xfffffffffffffff7) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r5, 0x5eb857) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000380)={[], 0x6, 0x9, 0x352, 0x0, 0x1f, 0x5, 0x5000, [], 0x7ff}) sendmmsg(r7, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 313.301828][T13367] binder: 13362:13367 unknown command 11020 [ 313.316740][T13367] binder: 13362:13367 ioctl c0306201 200001c0 returned -22 09:15:54 executing program 0: prctl$PR_GET_THP_DISABLE(0x2a) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa0086dd60d8652b0014064bfe8088000000000000000d08000000aafe8000000000000000000000020000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) pkey_free(0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getrandom(&(0x7f0000000200)=""/4096, 0x1000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)={0x5f, 0x0, "1f992898aa7c0e40531698b0640de3656577a0b834562a88d01ca692601b7cee87dc9dd2384647844bc8db49e2d040f63031fb8a7a2a4733dc67a359118c06157a7e952a96c31e78a42ba26916503679c1d8773adabec7"}, 0x8000) sendfile(r0, r0, &(0x7f0000000000), 0xb2d3) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x1) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000001240)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x3, 0xc, 0x80000000, 0x80000000, 0x893, 0x20, "92f9765c"}, 0x80000001, 0x3, @planes=&(0x7f0000001200)={0x0, 0x6, @mem_offset=0x1, 0x47d}, 0x4}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 09:15:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f-\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:54 executing program 1: getresuid(&(0x7f0000000280), &(0x7f0000000440), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0xfffffff, 0x6, 0x80, [], &(0x7f0000000080)={0x9e091e, 0xffff, [], @value64=0x4}}) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x335, 0x200100) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) renameat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') socket$inet6(0xa, 0x0, 0x0) [ 313.561070][T13383] binder: 13382:13383 unknown command 11532 09:15:54 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 313.606385][T13383] binder: 13382:13383 ioctl c0306201 200001c0 returned -22 09:15:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") [ 313.736515][T13397] tls_set_device_offload_rx: netdev lo with no TLS offload 09:15:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f.\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xc, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:55 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 314.026529][T13401] tls_set_device_offload_rx: netdev lo with no TLS offload 09:15:55 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x9, 0x1}) mlockall(0x7) [ 314.078529][T13418] binder: 13416:13418 unknown command 11788 [ 314.095085][T13418] binder: 13416:13418 ioctl c0306201 200001c0 returned -22 09:15:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\f0\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:55 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9cd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000740)) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r0, 0x2000000001000000) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x7) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000004c0)={0x4, &(0x7f0000000200)=""/72, &(0x7f0000000440)=[{0x3ff, 0x1000, 0x5, &(0x7f00000012c0)=""/4096}, {0x1000, 0xe, 0xfffffffffffffff8, &(0x7f0000000280)=""/14}, {0x9, 0x45, 0x4, &(0x7f00000002c0)=""/69}, {0x1ff, 0xdd, 0x5, &(0x7f0000000340)=""/221}]}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) r3 = semget(0x2, 0x4, 0x28) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000140)=""/167) socket$inet6_sctp(0xa, 0x5, 0x84) 09:15:55 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x20082) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0xfffffff, 0x4, 0x5, [], &(0x7f0000000180)={0x99096b, 0x6, [], @string=&(0x7f0000000140)=0x6}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x18, "51ce4cd5d04b5738bc0182fd89e4a7124ff8ba37b1c843f1"}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x7ff, 0x8004, 0x10000, 0x1f, 0x6, 0x2e, 0x3, r2}, 0x20) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:15:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:55 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 314.371742][T13441] binder: 13437:13441 unknown command 12300 [ 314.400805][T13441] binder: 13437:13441 ioctl c0306201 200001c0 returned -22 09:15:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) close(r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x126b) [ 314.478560][T13451] binder: 13437:13451 unknown command 12300 [ 314.516650][T13451] binder: 13437:13451 ioctl c0306201 200001c0 returned -22 09:15:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000140)={0x7f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) eventfd2(0x81, 0x80801) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) 09:15:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fX\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:56 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prctl$PR_SET_MM(0x23, 0x18, &(0x7f0000000000/0x2000)=nil) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') epoll_create1(0x0) 09:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x13, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xff, 0xffffffffffff7fff, 0xcc4, 0x80000001, 0xd7}) 09:15:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 314.800914][T13468] binder: 13465:13468 unknown command 22540 [ 314.827214][T13468] binder: 13465:13468 ioctl c0306201 200001c0 returned -22 [ 314.859474][T13468] binder: 13465:13468 unknown command 22540 [ 314.917509][T13468] binder: 13465:13468 ioctl c0306201 200001c0 returned -22 09:15:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r1}}, 0x18) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200004) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0xf5, 0x0, [0x9, 0x100, 0x5, 0x5]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000ffffffff) 09:15:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fd\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:56 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prctl$PR_SET_MM(0x23, 0x18, &(0x7f0000000000/0x2000)=nil) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') epoll_create1(0x0) 09:15:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 315.214317][T13503] binder: 13498:13503 unknown command 25612 [ 315.226800][T13503] binder: 13498:13503 ioctl c0306201 200001c0 returned -22 09:15:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:56 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x7, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc216}, 0x3c) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x7, 0x6, {0x55, 0x7f, 0x1, {0x1000000, 0x4}, {0x10001, 0x8001}, @cond=[{0x20, 0x6, 0x904b, 0x80000001, 0xd2, 0x7fff}, {0x221, 0x48b7, 0xfffffffffffffffa, 0x7ff, 0x5, 0x200}]}, {0x57, 0x81, 0xa7, {0x1, 0x25}, {0x8, 0xffff}, @cond=[{0x4, 0x80000001, 0xadc0000000000000, 0x38, 0xfffffffffffffffe, 0x101}, {0x1b6, 0x95, 0x2, 0x0, 0xfffffffffffffc00, 0x60b}]}}) close(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) 09:15:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:56 executing program 1: r0 = syz_open_dev$usb(0x0, 0x0, 0x11) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x111, 0x2}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@dev, @local}, &(0x7f00000001c0)=0xc) listen(r1, 0x51) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setrlimit(0x7, &(0x7f0000000480)={0x8}) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000000000, 0x0, 0xf4, 0xfffffffffffffffd}, 0xb) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r3+30000000}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x20}, @mss={0x2, 0x7fff}, @mss={0x2, 0x1}], 0x3) prctl$PR_GET_NAME(0x10, &(0x7f0000000340)=""/231) 09:15:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fi\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:56 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003600)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf}, 0x2c) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)="243742ad0b151c564c8b890543b45adf117c1930e6eb5bad7818cb0e10d0ebbb1df22e56f84cddda73151f4197c71244745465604060f29956c233f45641cce5886d8328a167fe9e2c6db1c8e299b8c7a66f46a9415a9f2470b1a7705afa6c608daed21a77ab06ce2e89ec81270f8cf8f07514a3896ce7c3e8679b39d517c4c2064ea139480e84981f7460b16f19224a4a07a212a320fd0af2b81f9ffdc365c661ac6ca986abad1e2153fe3df01156f94b9faf9f30d330cf8f217a261c8a", 0xbe}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f00000002c0)="4c56ee4556b0fe2c6f3e19e0ce38dcd66c4c461e5421c01ba1e75b99fd7ab6401308e46ad8dd46276cc6c176d02b0bcdd26322f0364b5e872f3116e4d71a0fba85ee1960633dcdd23a491bed49731eecb326a39f10628ef83263e12838eb74ab44427021a45d0829bdfa12caef4e3151b3207a2c14e9e64b944e2fb9bf8554621093024ec48a7761c4aa6726481119a84b88cfbb96a3edb1e0441a5f35aa879fba6c52064b3c2debb8dd3c4913ae4f23e74a0782a1b47cb2fbd4a88bae792625cfe991f138ec4c4557edd817ce4f07aa2249bd4a86aae338c39c8ad1f7444c3fa910d013e8083876ba6225ecfd496756", 0xf0}, {&(0x7f00000003c0)="b390ae36752c7dab0147245912b94b7b7f5030d2d74ef73f51efb63c3793d5c3d5093e189a654556dda3d5867e0fb55acab7749621cd11007de448825852b729e275cb9665c76989263c31d87777580fcf0e579e5dc51f436ddd23b9be59b6c14a2ff25f48f857", 0x67}, {&(0x7f0000000440)="484abadfd9d178f1250618a6902c44e5fd672ed38a6d25d1f9f84a553f1376dbb938088a4dba861cadfaf4ed9c5d91801eae66", 0x33}], 0x5, 0xb) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000280)={r1, &(0x7f0000000080), 0x0}, 0x18) [ 315.723707][T13534] binder: 13527:13534 unknown command 26892 [ 315.758909][T13534] binder: 13527:13534 ioctl c0306201 200001c0 returned -22 09:15:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fl\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 315.962972][T13550] binder: 13547:13550 unknown command 27660 [ 315.978038][T13550] binder: 13547:13550 ioctl c0306201 200001c0 returned -22 09:15:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='ramfs\x00'], &(0x7f0000000380)=[&(0x7f0000000100)='\x00', &(0x7f0000000180)='ramfs\x00', &(0x7f00000001c0)='ramfs\x00', &(0x7f0000000200)='ramfs\x00', &(0x7f0000000240)='ramfs\x00', &(0x7f0000000280)='ramfs\x00', &(0x7f00000002c0)='ramfs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)=':keyringproc-posix_acl_accessselfvmnet1#security\x00']) mkdir(&(0x7f0000002a00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') getcwd(&(0x7f0000001940)=""/4096, 0x1000) 09:15:57 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fo\x00\x00\vc'], 0x0, 0x0, 0x0}) [ 316.253279][T13565] binder: 13562:13565 unknown command 28428 [ 316.284115][T13565] binder: 13562:13565 ioctl c0306201 200001c0 returned -22 09:15:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:57 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fp\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:57 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:57 executing program 0: r0 = gettid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2040, 0x0) syncfs(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x9, 0x80, 0x2, {}, 0x91be, 0x3f}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000140)={r1, r1, 0x800}) timer_create(0x200000000000, &(0x7f0000cd0000)={0x0, 0x0, 0x4010000000, @tid=r0}, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1f, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() sysfs$3(0x3) r3 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x1000000000016) [ 316.564438][T13581] binder: 13576:13581 unknown command 28684 [ 316.602131][T13581] binder: 13576:13581 ioctl c0306201 200001c0 returned -22 09:15:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fs\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:58 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 316.861092][T13596] binder: 13594:13596 unknown command 29452 [ 316.882031][T13596] binder: 13594:13596 ioctl c0306201 200001c0 returned -22 09:15:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fu\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 317.056611][T13609] binder: 13607:13609 unknown command 29964 [ 317.074243][T13609] binder: 13607:13609 ioctl c0306201 200001c0 returned -22 09:15:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:15:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:15:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fx\x00\x00\vc'], 0x0, 0x0, 0x0}) 09:15:58 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:15:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6302000b63"], 0x0, 0x0, 0x0}) [ 317.330649][T13621] binder: 13617:13621 unknown command 30732 [ 317.351596][T13621] binder: 13617:13621 ioctl c0306201 200001c0 returned -22 [ 317.444934][T13631] binder: 13630:13631 unknown command 156428 [ 317.476422][T13631] binder: 13630:13631 ioctl c0306201 200001c0 returned -22 09:16:00 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045108, &(0x7f0000000100)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x2) 09:16:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6303000b63"], 0x0, 0x0, 0x0}) 09:16:00 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 319.626904][T13648] binder: 13642:13648 unknown command 221964 [ 319.666451][T13648] binder: 13642:13648 ioctl c0306201 200001c0 returned -22 09:16:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x100) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x7}, 0xb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10) 09:16:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6304000b63"], 0x0, 0x0, 0x0}) [ 319.877294][T13665] binder: 13664:13665 unknown command 287500 [ 319.920291][T13665] binder: 13664:13665 ioctl c0306201 200001c0 returned -22 09:16:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') listen(r1, 0x9) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffee1, 0x5e2d56eda283ecbb) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000001c0)=0xfff, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) 09:16:01 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6305000b63"], 0x0, 0x0, 0x0}) 09:16:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 320.272891][T13682] binder: 13678:13682 unknown command 353036 [ 320.308631][T13682] binder: 13678:13682 ioctl c0306201 200001c0 returned -22 09:16:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc000000003f319bd070") getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x89f2, &(0x7f0000000140)) 09:16:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6306000b63"], 0x0, 0x0, 0x0}) [ 320.562411][T13695] binder: 13694:13695 unknown command 418572 [ 320.628123][T13695] binder: 13694:13695 ioctl c0306201 200001c0 returned -22 09:16:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80500, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x77359400}, 0x10) 09:16:02 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\a\x00\vc'], 0x0, 0x0, 0x0}) 09:16:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffefff8}], 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3381, 0x80000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xffff) semop(r0, &(0x7f0000000080)=[{}, {0x0, 0xffffffff}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xb}], 0x1) [ 320.947378][T13714] binder: 13707:13714 unknown command 484108 [ 320.975184][T13714] binder: 13707:13714 ioctl c0306201 200001c0 returned -22 09:16:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fcH\x00\vc'], 0x0, 0x0, 0x0}) 09:16:02 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 321.234531][T13736] binder: 13732:13736 unknown command 4743948 [ 321.252111][T13736] binder: 13732:13736 ioctl c0306201 200001c0 returned -22 09:16:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:16:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fcL\x00\vc'], 0x0, 0x0, 0x0}) [ 321.461441][T13748] binder: 13747:13748 unknown command 5006092 [ 321.509640][T13748] binder: 13747:13748 ioctl c0306201 200001c0 returned -22 09:16:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:03 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc`\x00\vc'], 0x0, 0x0, 0x0}) 09:16:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 321.890531][T13764] binder: 13762:13764 unknown command 6316812 [ 321.909148][T13764] binder: 13762:13764 ioctl c0306201 200001c0 returned -22 09:16:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fch\x00\vc'], 0x0, 0x0, 0x0}) 09:16:03 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 322.075424][T13776] binder: 13775:13776 unknown command 6841100 09:16:03 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 322.116068][T13776] binder: 13775:13776 ioctl c0306201 200001c0 returned -22 09:16:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fcl\x00\vc'], 0x0, 0x0, 0x0}) 09:16:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 322.438698][T13795] binder: 13792:13795 unknown command 7103244 09:16:03 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 322.479327][T13795] binder: 13792:13795 ioctl c0306201 200001c0 returned -22 09:16:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x14, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fct\x00\vc'], 0x0, 0x0, 0x0}) 09:16:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:04 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(0x0, 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) semctl$SEM_STAT(0xffffffffffffffff, 0x4, 0x12, &(0x7f0000000000)=""/125) [ 322.958452][T13823] binder: 13818:13823 unknown command 7627532 [ 322.974890][T13823] binder: 13818:13823 ioctl c0306201 200001c0 returned -22 09:16:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fcz\x00\vc'], 0x0, 0x0, 0x0}) 09:16:04 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(0x0, 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 323.114389][T13837] binder: 13833:13837 unknown command 8020748 [ 323.152252][T13837] binder: 13833:13837 ioctl c0306201 200001c0 returned -22 09:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300030b63"], 0x0, 0x0, 0x0}) 09:16:04 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(0x0, 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 323.413052][T13854] binder: 13851:13854 unknown command 50357004 [ 323.435094][T13854] binder: 13851:13854 ioctl c0306201 200001c0 returned -22 09:16:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x15, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:05 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300050b63"], 0x0, 0x0, 0x0}) 09:16:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 323.823455][T13875] binder: 13871:13875 unknown command 83911436 [ 323.848845][T13875] binder: 13871:13875 ioctl c0306201 200001c0 returned -22 09:16:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x16, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:05 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300060b63"], 0x0, 0x0, 0x0}) 09:16:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 324.034901][T13900] binder: 13896:13900 unknown command 100688652 [ 324.066775][T13900] binder: 13896:13900 ioctl c0306201 200001c0 returned -22 09:16:05 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\a\vc'], 0x0, 0x0, 0x0}) 09:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:05 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x17, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 324.699317][T13921] binder: 13916:13921 unknown command 117465868 [ 324.719199][T13921] binder: 13916:13921 ioctl c0306201 200001c0 returned -22 09:16:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00 \vc'], 0x0, 0x0, 0x0}) 09:16:06 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 324.985144][T13942] binder: 13938:13942 unknown command 536896268 [ 325.005802][T13942] binder: 13938:13942 ioctl c0306201 200001c0 returned -22 09:16:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 325.038879][T13942] binder: 13938:13942 unknown command 536896268 [ 325.062108][T13942] binder: 13938:13942 ioctl c0306201 200001c0 returned -22 09:16:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00?\vc'], 0x0, 0x0, 0x0}) 09:16:06 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x18, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 325.575576][T13966] binder: 13965:13966 unknown command 1056989964 09:16:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 325.646230][T13966] binder: 13965:13966 ioctl c0306201 200001c0 returned -22 09:16:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00H\vc'], 0x0, 0x0, 0x0}) 09:16:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:07 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 325.931699][T13995] binder: 13989:13995 unknown command 1207984908 [ 325.959596][T13995] binder: 13989:13995 ioctl c0306201 200001c0 returned -22 09:16:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00L\vc'], 0x0, 0x0, 0x0}) 09:16:07 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 326.458123][T14007] binder: 14005:14007 unknown command 1275093772 [ 326.464514][T14007] binder: 14005:14007 ioctl c0306201 200001c0 returned -22 09:16:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00`\vc'], 0x0, 0x0, 0x0}) 09:16:07 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00h\vc'], 0x0, 0x0, 0x0}) [ 326.891044][T14042] binder: 14040:14042 unknown command 1744855820 [ 326.915195][T14042] binder: 14040:14042 ioctl c0306201 200001c0 returned -22 [ 326.939154][T14042] binder: 14040:14042 unknown command 1744855820 [ 326.955334][T14042] binder: 14040:14042 ioctl c0306201 200001c0 returned -22 09:16:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:08 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x2}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00l\vc'], 0x0, 0x0, 0x0}) 09:16:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x1a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 327.365319][T14063] binder: 14055:14063 unknown command 1811964684 [ 327.381193][T14063] binder: 14055:14063 ioctl c0306201 200001c0 returned -22 09:16:08 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00t\vc'], 0x0, 0x0, 0x0}) 09:16:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x4}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xff03}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 327.588200][T14074] binder: 14071:14074 unknown command 1946182412 [ 327.625492][T14074] binder: 14071:14074 ioctl c0306201 200001c0 returned -22 09:16:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00z\vc'], 0x0, 0x0, 0x0}) [ 327.780159][T14089] binder: 14083:14089 unknown command 2046845708 [ 327.833681][T14089] binder: 14083:14089 ioctl c0306201 200001c0 returned -22 09:16:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x40000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300020b63"], 0x0, 0x0, 0x0}) 09:16:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x1b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:09 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 328.244674][T14104] binder: 14101:14104 unknown command 33579788 [ 328.265592][T14104] binder: 14101:14104 ioctl c0306201 200001c0 returned -22 09:16:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7b0020}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 328.291127][T14112] binder: 14101:14112 unknown command 33579788 [ 328.394278][T14112] binder: 14101:14112 ioctl c0306201 200001c0 returned -22 09:16:09 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300030b63"], 0x0, 0x0, 0x0}) 09:16:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xf0ff7f}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 328.588590][T14128] binder: 14126:14128 unknown command 50357004 [ 328.649596][T14128] binder: 14126:14128 ioctl c0306201 200001c0 returned -22 09:16:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x1000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300040b63"], 0x0, 0x0, 0x0}) 09:16:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:10 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x1c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 329.177896][T14145] binder: 14143:14145 unknown command 67134220 [ 329.196191][T14145] binder: 14143:14145 ioctl c0306201 200001c0 returned -22 09:16:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x2000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300050b63"], 0x0, 0x0, 0x0}) 09:16:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x200000c0}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 329.499814][T14169] binder: 14168:14169 unknown command 83911436 09:16:10 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 329.576449][T14169] binder: 14168:14169 ioctl c0306201 200001c0 returned -22 09:16:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300060b63"], 0x0, 0x0, 0x0}) 09:16:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x20007b00}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:11 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x1d, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 330.301354][T14196] binder: 14188:14196 unknown command 100688652 [ 330.324062][T14196] binder: 14188:14196 ioctl c0306201 200001c0 returned -22 09:16:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7fffeec7}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 330.390827][T14196] binder: 14188:14196 unknown command 100688652 09:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 330.475880][T14196] binder: 14188:14196 ioctl c0306201 200001c0 returned -22 09:16:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\a\vc'], 0x0, 0x0, 0x0}) 09:16:11 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7fffefb0}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 330.771825][T14220] binder: 14216:14220 unknown command 117465868 [ 330.818261][T14220] binder: 14216:14220 ioctl c0306201 200001c0 returned -22 09:16:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7ffff000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00H\vc'], 0x0, 0x0, 0x0}) 09:16:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x1e, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 331.365285][T14241] binder: 14235:14241 unknown command 1207984908 [ 331.403954][T14241] binder: 14235:14241 ioctl c0306201 200001c0 returned -22 09:16:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x8dffffff}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00L\vc'], 0x0, 0x0, 0x0}) 09:16:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xb0efff7f}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:12 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 331.618646][T14261] binder: 14260:14261 unknown command 1275093772 [ 331.643845][T14261] binder: 14260:14261 ioctl c0306201 200001c0 returned -22 09:16:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xc0000020}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00`\vc'], 0x0, 0x0, 0x0}) [ 332.002118][T14288] binder: 14286:14288 unknown command 1610638092 [ 332.026512][T14288] binder: 14286:14288 ioctl c0306201 200001c0 returned -22 09:16:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x21, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xc7eeff7f}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:13 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00h\vc'], 0x0, 0x0, 0x0}) 09:16:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xeffdffff}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 332.250827][T14304] binder: 14302:14304 unknown command 1744855820 [ 332.283775][T14304] binder: 14302:14304 ioctl c0306201 200001c0 returned -22 09:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00l\vc'], 0x0, 0x0, 0x0}) 09:16:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xf0ffffff}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:13 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 332.497971][T14321] binder: 14319:14321 unknown command 1811964684 [ 332.533524][T14321] binder: 14319:14321 ioctl c0306201 200001c0 returned -22 09:16:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x22, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xff030000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00t\vc'], 0x0, 0x0, 0x0}) 09:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 333.054356][T14340] binder: 14339:14340 unknown command 1946182412 [ 333.080942][T14340] binder: 14339:14340 ioctl c0306201 200001c0 returned -22 09:16:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xfffffdef}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00z\vc'], 0x0, 0x0, 0x0}) 09:16:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xffffff7f}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 333.294220][T14369] binder: 14368:14369 unknown command 2046845708 [ 333.321242][T14369] binder: 14368:14369 ioctl c0306201 200001c0 returned -22 09:16:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x7fff) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001263"], 0x0, 0x0, 0x0}) 09:16:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xffffff8d}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 333.706900][T14388] binder: 14386:14388 unknown command 25362 [ 333.713038][T14388] binder: 14386:14388 ioctl c0306201 200001c0 returned -22 09:16:15 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xfffffff0}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00bc'], 0x0, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 333.967379][T14412] binder: 14410:14412 unknown command 25442 [ 333.983760][T14412] binder: 14410:14412 ioctl c0306201 200001c0 returned -22 09:16:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7ffffffff000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 334.010942][T14414] binder: 14410:14414 unknown command 25442 [ 334.081824][T14414] binder: 14410:14414 ioctl c0306201 200001c0 returned -22 09:16:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x24, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:15 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\fc'], 0x0, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:15 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x4000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x7b002000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\rc'], 0x0, 0x0, 0x0}) 09:16:15 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) 09:16:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xf0ff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001263"], 0x0, 0x0, 0x0}) [ 334.719851][T14464] binder: 14461:14464 unknown command 25362 [ 334.764524][T14464] binder: 14461:14464 ioctl c0306201 200001c0 returned -22 09:16:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x25, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xf0ffffff7f0000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:16 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) 09:16:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00bc'], 0x0, 0x0, 0x0}) 09:16:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 335.056565][T14477] binder: 14476:14477 unknown command 25442 [ 335.062556][T14477] binder: 14476:14477 ioctl c0306201 200001c0 returned -22 09:16:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x100000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:16 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) 09:16:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x200000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300000263"], 0x0, 0x0, 0x0}) 09:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 335.390113][T14505] binder: 14504:14505 unknown command 25346 [ 335.413847][T14505] binder: 14504:14505 ioctl c0306201 200001c0 returned -22 09:16:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x26, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:16 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) 09:16:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300000463"], 0x0, 0x0, 0x0}) 09:16:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x8dffffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 335.670499][T14524] binder: 14519:14524 unknown command 25348 [ 335.692161][T14524] binder: 14519:14524 ioctl c0306201 200001c0 returned -22 09:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xb0efff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\ac'], 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:17 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 335.832437][T14537] binder: 14536:14537 unknown command 25351 [ 335.868492][T14537] binder: 14536:14537 ioctl c0306201 200001c0 returned -22 09:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xc000002000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x27, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300000363"], 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 09:16:17 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 09:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xc7eeff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 336.286386][T14568] binder: 14566:14568 unknown command 25347 09:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 09:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xeffdffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 336.333594][T14568] binder: 14566:14568 ioctl c0306201 200001c0 returned -22 [ 336.367422][T14568] binder: 14566:14568 unknown command 25347 09:16:17 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 336.418358][T14568] binder: 14566:14568 ioctl c0306201 200001c0 returned -22 09:16:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xf0ffffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 09:16:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\nc'], 0x0, 0x0, 0x0}) [ 336.664689][T14597] binder: 14594:14597 unknown command 25354 [ 336.710085][T14597] binder: 14594:14597 ioctl c0306201 200001c0 returned -22 09:16:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x28, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:18 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x0) 09:16:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xff03000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 09:16:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300001063"], 0x0, 0x0, 0x0}) 09:16:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0xffffff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 337.057112][T14616] binder: 14606:14616 unknown command 25360 [ 337.087653][T14616] binder: 14606:14616 ioctl c0306201 200001c0 returned -22 09:16:18 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x0) 09:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 09:16:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300000e63"], 0x0, 0x0, 0x0}) 09:16:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x2}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 337.345796][T14639] binder: 14635:14639 unknown command 25358 [ 337.390894][T14639] binder: 14635:14639 ioctl c0306201 200001c0 returned -22 09:16:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x29, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:19 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) r3 = fcntl$getown(r2, 0x9) gettid() fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xa, &(0x7f00000002c0)='attr/prev\x00'}, 0x30) getpgrp(r3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) fcntl$setownex(r1, 0xf, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000400), 0x4) r5 = syz_open_procfs(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x0) 09:16:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x4}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:16:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c6300000f63"], 0x0, 0x0, 0x0}) 09:16:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xff03}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 337.762184][T14660] binder: 14649:14660 unknown command 25359 [ 337.842298][T14660] binder: 14649:14660 ioctl c0306201 200001c0 returned -22 09:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:16:19 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) pread64(r0, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) 09:16:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x40000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\bc'], 0x0, 0x0, 0x0}) 09:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 338.151587][T14685] binder: 14683:14685 unknown command 25352 [ 338.183165][T14685] binder: 14683:14685 ioctl c0306201 200001c0 returned -22 09:16:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x2a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x7b0020}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.228223][T14997] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.236795][T14997] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 343.244751][T14997] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 343.253003][T14997] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 343.261048][T14997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 343.269857][T14997] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 09:16:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x31, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x7b002000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:24 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vX'], 0x0, 0x0, 0x0}) 09:16:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:24 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 343.486101][T15017] FAULT_INJECTION: forcing a failure. [ 343.486101][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 343.506583][T15017] CPU: 1 PID: 15017 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 343.514713][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.514720][T15017] Call Trace: [ 343.514751][T15017] dump_stack+0x172/0x1f0 09:16:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xf0ff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 343.514780][T15017] should_fail.cold+0xa/0x15 [ 343.531134][T15020] binder: 15013:15020 unknown command 22539 [ 343.532532][T15017] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.532555][T15017] ? ___might_sleep+0x163/0x280 [ 343.544640][T15020] binder: 15013:15020 ioctl c0306201 200001c0 returned -22 [ 343.549000][T15017] __should_failslab+0x121/0x190 [ 343.549015][T15017] should_failslab+0x9/0x14 [ 343.549033][T15017] kmem_cache_alloc_node_trace+0x270/0x720 [ 343.549061][T15017] __kmalloc_node_track_caller+0x3d/0x70 [ 343.566029][T15017] __kmalloc_reserve.isra.0+0x40/0xf0 [ 343.576499][T15017] __alloc_skb+0x10b/0x5e0 [ 343.576515][T15017] ? skb_trim+0x190/0x190 [ 343.576540][T15017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.588049][T15017] ? netlink_autobind.isra.0+0x228/0x310 [ 343.608821][T15017] netlink_sendmsg+0x97b/0xd70 [ 343.613943][T15017] ? netlink_unicast+0x720/0x720 [ 343.618892][T15017] ? tomoyo_socket_sendmsg+0x26/0x30 [ 343.624384][T15017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.630623][T15017] ? security_socket_sendmsg+0x93/0xc0 09:16:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vd'], 0x0, 0x0, 0x0}) [ 343.630644][T15017] ? netlink_unicast+0x720/0x720 [ 343.641035][T15017] sock_sendmsg+0xdd/0x130 [ 343.645466][T15017] ___sys_sendmsg+0x806/0x930 [ 343.650175][T15017] ? copy_msghdr_from_user+0x430/0x430 [ 343.655747][T15017] ? kasan_check_read+0x11/0x20 [ 343.660634][T15017] ? __fget+0x381/0x550 [ 343.664876][T15017] ? ksys_dup3+0x3e0/0x3e0 [ 343.669307][T15017] ? __fget_light+0x1a9/0x230 [ 343.674008][T15017] ? __fdget+0x1b/0x20 [ 343.678086][T15017] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 09:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xf0ffffff7f0000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 343.684344][T15017] __sys_sendmsg+0x105/0x1d0 [ 343.684364][T15017] ? __ia32_sys_shutdown+0x80/0x80 [ 343.684377][T15017] ? fput_many+0x12c/0x1a0 [ 343.684403][T15017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.703946][T15017] ? do_syscall_64+0x26/0x610 [ 343.708638][T15017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.714728][T15017] ? do_syscall_64+0x26/0x610 [ 343.719611][T15017] __x64_sys_sendmsg+0x78/0xb0 [ 343.724395][T15017] do_syscall_64+0x103/0x610 [ 343.724416][T15017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.724431][T15017] RIP: 0033:0x458c29 [ 343.736496][T15017] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.736505][T15017] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.736519][T15017] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 343.736526][T15017] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 343.736534][T15017] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 343.736542][T15017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 343.736549][T15017] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 343.834140][T15032] binder: 15028:15032 unknown command 25611 09:16:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 343.881249][T15032] binder: 15028:15032 ioctl c0306201 200001c0 returned -22 09:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vi'], 0x0, 0x0, 0x0}) [ 344.136028][T15046] binder: 15045:15046 unknown command 26891 [ 344.144098][T15046] binder: 15045:15046 ioctl c0306201 200001c0 returned -22 09:16:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x32, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:25 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x200000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vl'], 0x0, 0x0, 0x0}) 09:16:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 344.377831][T15065] binder: 15056:15065 unknown command 27659 [ 344.403406][T15065] binder: 15056:15065 ioctl c0306201 200001c0 returned -22 09:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x8dffffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 344.429580][T15069] binder: 15056:15069 unknown command 27659 [ 344.443492][T15069] binder: 15056:15069 ioctl c0306201 200001c0 returned -22 09:16:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vo'], 0x0, 0x0, 0x0}) 09:16:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xb0efff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 344.639370][T15080] binder: 15079:15080 unknown command 28427 [ 344.651559][T15080] binder: 15079:15080 ioctl c0306201 200001c0 returned -22 [ 344.663932][T15080] binder: 15079:15080 unknown command 28427 [ 344.684008][T15083] FAULT_INJECTION: forcing a failure. [ 344.684008][T15083] name failslab, interval 1, probability 0, space 0, times 0 [ 344.702963][T15080] binder: 15079:15080 ioctl c0306201 200001c0 returned -22 [ 344.726324][T15083] CPU: 0 PID: 15083 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 344.734362][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.744427][T15083] Call Trace: [ 344.747739][T15083] dump_stack+0x172/0x1f0 [ 344.752085][T15083] should_fail.cold+0xa/0x15 [ 344.756696][T15083] ? __netlink_lookup+0x3c8/0x7a0 [ 344.761823][T15083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.767920][T15083] __should_failslab+0x121/0x190 [ 344.772894][T15083] should_failslab+0x9/0x14 [ 344.777411][T15083] kmem_cache_alloc+0x47/0x6f0 [ 344.782292][T15083] ? lock_acquire+0x16f/0x3f0 [ 344.787256][T15083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.793610][T15083] skb_clone+0x150/0x3b0 [ 344.797953][T15083] netlink_deliver_tap+0x95c/0xc00 [ 344.803087][T15083] netlink_unicast+0x5a7/0x720 [ 344.807873][T15083] ? netlink_attachskb+0x770/0x770 [ 344.813001][T15083] ? _copy_from_iter_full+0x25d/0x900 [ 344.818389][T15083] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 344.824124][T15083] ? __check_object_size+0x3d/0x42f [ 344.829369][T15083] netlink_sendmsg+0x8ae/0xd70 [ 344.834156][T15083] ? netlink_unicast+0x720/0x720 09:16:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vp'], 0x0, 0x0, 0x0}) [ 344.839117][T15083] ? tomoyo_socket_sendmsg+0x26/0x30 [ 344.845374][T15083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.851634][T15083] ? security_socket_sendmsg+0x93/0xc0 [ 344.857114][T15083] ? netlink_unicast+0x720/0x720 [ 344.862065][T15083] sock_sendmsg+0xdd/0x130 [ 344.866497][T15083] ___sys_sendmsg+0x806/0x930 [ 344.871189][T15083] ? copy_msghdr_from_user+0x430/0x430 [ 344.877204][T15083] ? kasan_check_read+0x11/0x20 [ 344.882077][T15083] ? __fget+0x381/0x550 [ 344.886340][T15083] ? ksys_dup3+0x3e0/0x3e0 [ 344.890783][T15083] ? __fget_light+0x1a9/0x230 [ 344.895510][T15083] ? __fdget+0x1b/0x20 [ 344.899598][T15083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.905941][T15083] __sys_sendmsg+0x105/0x1d0 [ 344.910579][T15083] ? __ia32_sys_shutdown+0x80/0x80 [ 344.915873][T15083] ? fput_many+0x12c/0x1a0 [ 344.920752][T15083] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 344.926323][T15083] ? do_syscall_64+0x26/0x610 [ 344.931018][T15083] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.937186][T15083] ? do_syscall_64+0x26/0x610 [ 344.941883][T15083] __x64_sys_sendmsg+0x78/0xb0 [ 344.946681][T15083] do_syscall_64+0x103/0x610 [ 344.951381][T15083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.957290][T15083] RIP: 0033:0x458c29 [ 344.961192][T15083] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.981778][T15083] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.981803][T15083] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 344.981810][T15083] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 344.981817][T15083] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.981824][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 344.981831][T15083] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 345.004998][T15091] binder: 15089:15091 unknown command 28683 [ 345.015032][T15091] binder: 15089:15091 ioctl c0306201 200001c0 returned -22 09:16:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x33, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:26 executing program 4 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xc000002000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vs'], 0x0, 0x0, 0x0}) [ 345.196502][T15108] binder: 15102:15108 unknown command 29451 [ 345.203350][T15108] binder: 15102:15108 ioctl c0306201 200001c0 returned -22 [ 345.209616][T15113] FAULT_INJECTION: forcing a failure. [ 345.209616][T15113] name failslab, interval 1, probability 0, space 0, times 0 [ 345.224597][T15113] CPU: 1 PID: 15113 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 345.232606][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.242676][T15113] Call Trace: [ 345.245974][T15113] dump_stack+0x172/0x1f0 [ 345.250320][T15113] should_fail.cold+0xa/0x15 [ 345.254933][T15113] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.260929][T15113] ? ___might_sleep+0x163/0x280 [ 345.265798][T15113] __should_failslab+0x121/0x190 [ 345.270744][T15113] should_failslab+0x9/0x14 [ 345.275338][T15113] kmem_cache_alloc_trace+0x2d1/0x760 [ 345.275375][T15113] rtnl_newlink+0x4b/0xa0 [ 345.285058][T15113] ? __rtnl_newlink+0x16c0/0x16c0 [ 345.290089][T15113] rtnetlink_rcv_msg+0x465/0xb00 [ 345.290108][T15113] ? rtnetlink_put_metrics+0x560/0x560 [ 345.300486][T15113] ? netdev_pick_tx+0x300/0x300 [ 345.305343][T15113] ? netlink_deliver_tap+0x22d/0xc00 [ 345.310723][T15113] ? find_held_lock+0x35/0x130 [ 345.315501][T15113] netlink_rcv_skb+0x17a/0x460 [ 345.320279][T15113] ? rtnetlink_put_metrics+0x560/0x560 [ 345.325759][T15113] ? netlink_ack+0xb50/0xb50 [ 345.330362][T15113] ? kasan_check_read+0x11/0x20 [ 345.330492][T15122] binder: 15120:15122 unknown command 29963 [ 345.335233][T15113] ? netlink_deliver_tap+0x254/0xc00 [ 345.335258][T15113] rtnetlink_rcv+0x1d/0x30 [ 345.335270][T15113] netlink_unicast+0x536/0x720 [ 345.335288][T15113] ? netlink_attachskb+0x770/0x770 [ 345.355688][T15113] ? _copy_from_iter_full+0x25d/0x900 [ 345.355708][T15113] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 345.355723][T15113] ? __check_object_size+0x3d/0x42f [ 345.355744][T15113] netlink_sendmsg+0x8ae/0xd70 [ 345.372149][T15113] ? netlink_unicast+0x720/0x720 [ 345.372170][T15113] ? tomoyo_socket_sendmsg+0x26/0x30 [ 345.372201][T15113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.380943][T15122] binder: 15120:15122 ioctl c0306201 200001c0 returned -22 [ 345.382417][T15113] ? security_socket_sendmsg+0x93/0xc0 [ 345.382435][T15113] ? netlink_unicast+0x720/0x720 [ 345.382455][T15113] sock_sendmsg+0xdd/0x130 [ 345.382477][T15113] ___sys_sendmsg+0x806/0x930 [ 345.425841][T15113] ? copy_msghdr_from_user+0x430/0x430 [ 345.431330][T15113] ? kasan_check_read+0x11/0x20 [ 345.436727][T15113] ? __fget+0x381/0x550 [ 345.440901][T15113] ? ksys_dup3+0x3e0/0x3e0 [ 345.445333][T15113] ? __fget_light+0x1a9/0x230 [ 345.450039][T15113] ? __fdget+0x1b/0x20 [ 345.454133][T15113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.460386][T15113] __sys_sendmsg+0x105/0x1d0 [ 345.460405][T15113] ? __ia32_sys_shutdown+0x80/0x80 [ 345.460417][T15113] ? fput_many+0x12c/0x1a0 [ 345.460443][T15113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 345.470112][T15113] ? do_syscall_64+0x26/0x610 [ 345.470129][T15113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.470140][T15113] ? do_syscall_64+0x26/0x610 09:16:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xc7eeff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vu'], 0x0, 0x0, 0x0}) 09:16:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xeffdffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xf0ffffff00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vx'], 0x0, 0x0, 0x0}) [ 345.470165][T15113] __x64_sys_sendmsg+0x78/0xb0 [ 345.500679][T15113] do_syscall_64+0x103/0x610 [ 345.505299][T15113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.511281][T15113] RIP: 0033:0x458c29 [ 345.511298][T15113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.511306][T15113] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:16:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 345.511320][T15113] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 345.511333][T15113] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 345.535201][T15113] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.535212][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 345.535221][T15113] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 345.573293][T15131] binder: 15129:15131 unknown command 30731 [ 345.643803][T15131] binder: 15129:15131 ioctl c0306201 200001c0 returned -22 09:16:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x34, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:27 executing program 4 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xff03000000000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:27 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x2, 0x0, 0x0}) 09:16:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) [ 345.990307][T15152] binder: 15148:15152 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 346.001265][T15151] FAULT_INJECTION: forcing a failure. [ 346.001265][T15151] name failslab, interval 1, probability 0, space 0, times 0 [ 346.029833][T15152] binder: 15148:15152 ioctl c0306201 200001c0 returned -14 [ 346.048387][T15151] CPU: 1 PID: 15151 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 346.056460][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.066721][T15151] Call Trace: [ 346.070049][T15151] dump_stack+0x172/0x1f0 [ 346.074413][T15151] should_fail.cold+0xa/0x15 [ 346.079028][T15151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.084863][T15151] ? ___might_sleep+0x163/0x280 [ 346.089733][T15151] __should_failslab+0x121/0x190 [ 346.094695][T15151] should_failslab+0x9/0x14 [ 346.099215][T15151] kmem_cache_alloc_node_trace+0x270/0x720 [ 346.105039][T15151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.111314][T15151] __kmalloc_node+0x3d/0x70 [ 346.115831][T15151] kvmalloc_node+0x68/0x100 [ 346.120350][T15151] alloc_netdev_mqs+0x98/0xd30 [ 346.125120][T15151] ? ns_capable+0x20/0x30 [ 346.129475][T15151] ? vti6_tnl_xmit.cold+0x34/0x34 [ 346.134512][T15151] rtnl_create_link+0x22d/0xac0 [ 346.139389][T15151] __rtnl_newlink+0xf7b/0x16c0 [ 346.144205][T15151] ? rtnl_link_unregister+0x250/0x250 [ 346.149584][T15151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.155843][T15151] ? is_bpf_text_address+0xd3/0x170 [ 346.161095][T15151] ? kernel_text_address+0x73/0xf0 [ 346.166224][T15151] ? __kernel_text_address+0xd/0x40 [ 346.171442][T15151] ? unwind_get_return_address+0x61/0xa0 [ 346.177102][T15151] ? __save_stack_trace+0x99/0x100 [ 346.182254][T15151] ? save_stack+0xa9/0xd0 [ 346.186697][T15151] ? save_stack+0x45/0xd0 [ 346.191057][T15151] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 346.196881][T15151] ? kasan_kmalloc+0x9/0x10 [ 346.201405][T15151] ? kmem_cache_alloc_trace+0x151/0x760 [ 346.206970][T15151] ? rtnl_newlink+0x4b/0xa0 [ 346.211487][T15151] ? rtnetlink_rcv_msg+0x465/0xb00 [ 346.216683][T15151] rtnl_newlink+0x69/0xa0 [ 346.221023][T15151] ? __rtnl_newlink+0x16c0/0x16c0 [ 346.226235][T15151] rtnetlink_rcv_msg+0x465/0xb00 [ 346.231193][T15151] ? rtnetlink_put_metrics+0x560/0x560 [ 346.236687][T15151] ? netdev_pick_tx+0x300/0x300 [ 346.241555][T15151] ? netlink_deliver_tap+0x22d/0xc00 [ 346.246858][T15151] ? find_held_lock+0x35/0x130 [ 346.251639][T15151] netlink_rcv_skb+0x17a/0x460 [ 346.256434][T15151] ? rtnetlink_put_metrics+0x560/0x560 [ 346.261998][T15151] ? netlink_ack+0xb50/0xb50 [ 346.266704][T15151] ? kasan_check_read+0x11/0x20 [ 346.271572][T15151] ? netlink_deliver_tap+0x254/0xc00 [ 346.276877][T15151] rtnetlink_rcv+0x1d/0x30 [ 346.281309][T15151] netlink_unicast+0x536/0x720 [ 346.286095][T15151] ? netlink_attachskb+0x770/0x770 [ 346.291404][T15151] ? _copy_from_iter_full+0x25d/0x900 [ 346.302452][T15151] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 346.308272][T15151] ? __check_object_size+0x3d/0x42f [ 346.313663][T15151] netlink_sendmsg+0x8ae/0xd70 [ 346.318451][T15151] ? netlink_unicast+0x720/0x720 [ 346.323549][T15151] ? tomoyo_socket_sendmsg+0x26/0x30 [ 346.328846][T15151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.335369][T15151] ? security_socket_sendmsg+0x93/0xc0 [ 346.340844][T15151] ? netlink_unicast+0x720/0x720 [ 346.345806][T15151] sock_sendmsg+0xdd/0x130 [ 346.350241][T15151] ___sys_sendmsg+0x806/0x930 [ 346.355123][T15151] ? copy_msghdr_from_user+0x430/0x430 [ 346.360607][T15151] ? kasan_check_read+0x11/0x20 [ 346.365562][T15151] ? __fget+0x381/0x550 [ 346.369850][T15151] ? ksys_dup3+0x3e0/0x3e0 [ 346.374291][T15151] ? __fget_light+0x1a9/0x230 [ 346.378977][T15151] ? __fdget+0x1b/0x20 [ 346.383060][T15151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.389313][T15151] __sys_sendmsg+0x105/0x1d0 [ 346.393912][T15151] ? __ia32_sys_shutdown+0x80/0x80 [ 346.399040][T15151] ? fput_many+0x12c/0x1a0 [ 346.403471][T15151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 346.408961][T15151] ? do_syscall_64+0x26/0x610 [ 346.413647][T15151] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.419719][T15151] ? do_syscall_64+0x26/0x610 [ 346.424412][T15151] __x64_sys_sendmsg+0x78/0xb0 [ 346.429198][T15151] do_syscall_64+0x103/0x610 [ 346.433799][T15151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.439701][T15151] RIP: 0033:0x458c29 [ 346.443606][T15151] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.463217][T15151] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.471642][T15151] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 346.479648][T15151] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 346.487743][T15151] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 09:16:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x3, 0x0, 0x0}) 09:16:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 346.495743][T15151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 346.503845][T15151] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 09:16:27 executing program 0: getrandom(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:27 executing program 4 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 346.652080][T15167] binder: 15164:15167 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:16:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x2}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 346.715293][T15167] binder: 15164:15167 ioctl c0306201 200001c0 returned -14 09:16:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x4, 0x0, 0x0}) [ 346.824071][T15174] FAULT_INJECTION: forcing a failure. [ 346.824071][T15174] name failslab, interval 1, probability 0, space 0, times 0 [ 346.927137][T15174] CPU: 0 PID: 15174 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 346.935179][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.945249][T15174] Call Trace: [ 346.948569][T15174] dump_stack+0x172/0x1f0 [ 346.952920][T15174] should_fail.cold+0xa/0x15 [ 346.957539][T15174] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.963374][T15174] __should_failslab+0x121/0x190 [ 346.968332][T15174] should_failslab+0x9/0x14 [ 346.972859][T15174] kmem_cache_alloc_trace+0x4b/0x760 [ 346.978168][T15174] __hw_addr_create_ex+0x5e/0x310 [ 346.983214][T15174] __hw_addr_add_ex+0x1ef/0x2b0 [ 346.988090][T15174] dev_addr_init+0x118/0x200 [ 346.992690][T15174] ? dev_mc_flush+0x40/0x40 [ 346.997204][T15174] ? __kmalloc_node+0x4e/0x70 [ 347.001899][T15174] alloc_netdev_mqs+0x142/0xd30 [ 347.006755][T15174] ? ns_capable+0x20/0x30 [ 347.011097][T15174] ? vti6_tnl_xmit.cold+0x34/0x34 [ 347.016159][T15174] rtnl_create_link+0x22d/0xac0 [ 347.021033][T15174] __rtnl_newlink+0xf7b/0x16c0 [ 347.025814][T15174] ? rtnl_link_unregister+0x250/0x250 [ 347.031193][T15174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.037453][T15174] ? is_bpf_text_address+0xd3/0x170 [ 347.042675][T15174] ? kernel_text_address+0x73/0xf0 [ 347.047795][T15174] ? __kernel_text_address+0xd/0x40 [ 347.053010][T15174] ? unwind_get_return_address+0x61/0xa0 [ 347.058659][T15174] ? __save_stack_trace+0x99/0x100 [ 347.063797][T15174] ? save_stack+0xa9/0xd0 [ 347.068140][T15174] ? save_stack+0x45/0xd0 [ 347.072483][T15174] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 347.078303][T15174] ? kasan_kmalloc+0x9/0x10 [ 347.082900][T15174] ? kmem_cache_alloc_trace+0x151/0x760 [ 347.088450][T15174] ? rtnl_newlink+0x4b/0xa0 [ 347.092973][T15174] ? rtnetlink_rcv_msg+0x465/0xb00 [ 347.098160][T15174] rtnl_newlink+0x69/0xa0 [ 347.102502][T15174] ? __rtnl_newlink+0x16c0/0x16c0 [ 347.107532][T15174] rtnetlink_rcv_msg+0x465/0xb00 [ 347.112564][T15174] ? rtnetlink_put_metrics+0x560/0x560 [ 347.118029][T15174] ? netdev_pick_tx+0x300/0x300 [ 347.122912][T15174] ? netlink_deliver_tap+0x22d/0xc00 [ 347.128204][T15174] ? find_held_lock+0x35/0x130 [ 347.132976][T15174] netlink_rcv_skb+0x17a/0x460 [ 347.137750][T15174] ? rtnetlink_put_metrics+0x560/0x560 [ 347.143223][T15174] ? netlink_ack+0xb50/0xb50 [ 347.147874][T15174] ? kasan_check_read+0x11/0x20 [ 347.152738][T15174] ? netlink_deliver_tap+0x254/0xc00 [ 347.158042][T15174] rtnetlink_rcv+0x1d/0x30 [ 347.162594][T15174] netlink_unicast+0x536/0x720 [ 347.167375][T15174] ? netlink_attachskb+0x770/0x770 [ 347.172498][T15174] ? _copy_from_iter_full+0x25d/0x900 [ 347.177881][T15174] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 347.183622][T15174] ? __check_object_size+0x3d/0x42f [ 347.188839][T15174] netlink_sendmsg+0x8ae/0xd70 [ 347.193623][T15174] ? netlink_unicast+0x720/0x720 [ 347.198573][T15174] ? tomoyo_socket_sendmsg+0x26/0x30 [ 347.203890][T15174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.210158][T15174] ? security_socket_sendmsg+0x93/0xc0 [ 347.215687][T15174] ? netlink_unicast+0x720/0x720 [ 347.220632][T15174] sock_sendmsg+0xdd/0x130 09:16:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x35, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:28 executing program 0: getrandom(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 347.225065][T15174] ___sys_sendmsg+0x806/0x930 [ 347.229752][T15174] ? copy_msghdr_from_user+0x430/0x430 [ 347.235238][T15174] ? kasan_check_read+0x11/0x20 [ 347.240098][T15174] ? __fget+0x381/0x550 [ 347.244273][T15174] ? ksys_dup3+0x3e0/0x3e0 [ 347.248710][T15174] ? __fget_light+0x1a9/0x230 [ 347.253404][T15174] ? __fdget+0x1b/0x20 [ 347.257486][T15174] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.263732][T15174] __sys_sendmsg+0x105/0x1d0 [ 347.268340][T15174] ? __ia32_sys_shutdown+0x80/0x80 [ 347.273460][T15174] ? fput_many+0x12c/0x1a0 09:16:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x5, 0x0, 0x0}) [ 347.277903][T15174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.283370][T15174] ? do_syscall_64+0x26/0x610 [ 347.288069][T15174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.294144][T15174] ? do_syscall_64+0x26/0x610 [ 347.299268][T15174] __x64_sys_sendmsg+0x78/0xb0 [ 347.304076][T15174] do_syscall_64+0x103/0x610 [ 347.308706][T15174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.314598][T15174] RIP: 0033:0x458c29 [ 347.318500][T15174] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.338111][T15174] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.338126][T15174] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 347.338133][T15174] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 347.338140][T15174] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.338146][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 347.338154][T15174] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 09:16:28 executing program 4 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xff03}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:28 executing program 0: getrandom(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 347.447581][T15201] binder: 15198:15201 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 347.500519][T15201] binder: 15198:15201 ioctl c0306201 200001c0 returned -14 [ 347.523241][T15204] FAULT_INJECTION: forcing a failure. [ 347.523241][T15204] name failslab, interval 1, probability 0, space 0, times 0 09:16:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x6, 0x0, 0x0}) 09:16:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 347.617179][T15204] CPU: 0 PID: 15204 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 347.625333][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.635403][T15204] Call Trace: [ 347.638726][T15204] dump_stack+0x172/0x1f0 [ 347.643077][T15204] should_fail.cold+0xa/0x15 [ 347.647675][T15204] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 347.647700][T15204] ? ___might_sleep+0x163/0x280 [ 347.647722][T15204] __should_failslab+0x121/0x190 [ 347.647735][T15204] should_failslab+0x9/0x14 [ 347.647752][T15204] kmem_cache_alloc_node_trace+0x270/0x720 [ 347.647770][T15204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.647791][T15204] ? dev_addr_init+0x17f/0x200 [ 347.647809][T15204] __kmalloc_node+0x3d/0x70 [ 347.682608][T15213] binder: 15212:15213 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 347.684716][T15204] kvmalloc_node+0x68/0x100 [ 347.684736][T15204] alloc_netdev_mqs+0x67f/0xd30 [ 347.684757][T15204] ? vti6_tnl_xmit.cold+0x34/0x34 [ 347.684779][T15204] rtnl_create_link+0x22d/0xac0 [ 347.698124][T15204] __rtnl_newlink+0xf7b/0x16c0 [ 347.698154][T15204] ? rtnl_link_unregister+0x250/0x250 [ 347.698171][T15204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.698194][T15204] ? is_bpf_text_address+0xd3/0x170 [ 347.698209][T15204] ? kernel_text_address+0x73/0xf0 [ 347.698221][T15204] ? __kernel_text_address+0xd/0x40 [ 347.698237][T15204] ? unwind_get_return_address+0x61/0xa0 [ 347.698251][T15204] ? __save_stack_trace+0x99/0x100 [ 347.698280][T15204] ? save_stack+0xa9/0xd0 [ 347.757812][T15213] binder: 15212:15213 ioctl c0306201 200001c0 returned -14 [ 347.762602][T15204] ? save_stack+0x45/0xd0 [ 347.762621][T15204] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 347.762634][T15204] ? kasan_kmalloc+0x9/0x10 [ 347.762648][T15204] ? kmem_cache_alloc_trace+0x151/0x760 [ 347.762662][T15204] ? rtnl_newlink+0x4b/0xa0 [ 347.762681][T15204] ? rtnetlink_rcv_msg+0x465/0xb00 [ 347.778573][T15204] rtnl_newlink+0x69/0xa0 [ 347.778588][T15204] ? __rtnl_newlink+0x16c0/0x16c0 [ 347.778602][T15204] rtnetlink_rcv_msg+0x465/0xb00 [ 347.778619][T15204] ? rtnetlink_put_metrics+0x560/0x560 [ 347.778633][T15204] ? netdev_pick_tx+0x300/0x300 [ 347.778647][T15204] ? netlink_deliver_tap+0x22d/0xc00 [ 347.778667][T15204] ? find_held_lock+0x35/0x130 [ 347.804184][T15204] netlink_rcv_skb+0x17a/0x460 [ 347.804207][T15204] ? rtnetlink_put_metrics+0x560/0x560 [ 347.804222][T15204] ? netlink_ack+0xb50/0xb50 [ 347.804244][T15204] ? kasan_check_read+0x11/0x20 [ 347.849248][T15204] ? netlink_deliver_tap+0x254/0xc00 [ 347.849274][T15204] rtnetlink_rcv+0x1d/0x30 [ 347.849286][T15204] netlink_unicast+0x536/0x720 [ 347.849303][T15204] ? netlink_attachskb+0x770/0x770 [ 347.849318][T15204] ? _copy_from_iter_full+0x25d/0x900 [ 347.849334][T15204] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 347.849348][T15204] ? __check_object_size+0x3d/0x42f [ 347.849365][T15204] netlink_sendmsg+0x8ae/0xd70 [ 347.849382][T15204] ? netlink_unicast+0x720/0x720 [ 347.849403][T15204] ? tomoyo_socket_sendmsg+0x26/0x30 [ 347.883936][T15204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 09:16:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x7, 0x0, 0x0}) [ 347.883954][T15204] ? security_socket_sendmsg+0x93/0xc0 [ 347.883971][T15204] ? netlink_unicast+0x720/0x720 [ 347.883988][T15204] sock_sendmsg+0xdd/0x130 [ 347.884012][T15204] ___sys_sendmsg+0x806/0x930 [ 347.884028][T15204] ? copy_msghdr_from_user+0x430/0x430 [ 347.884054][T15204] ? kasan_check_read+0x11/0x20 [ 347.884071][T15204] ? __fget+0x381/0x550 [ 347.884091][T15204] ? ksys_dup3+0x3e0/0x3e0 [ 347.951147][T15204] ? __fget_light+0x1a9/0x230 [ 347.951166][T15204] ? __fdget+0x1b/0x20 [ 347.951189][T15204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.970787][T15204] __sys_sendmsg+0x105/0x1d0 [ 347.975393][T15204] ? __ia32_sys_shutdown+0x80/0x80 [ 347.975415][T15204] ? fput_many+0x12c/0x1a0 [ 347.975445][T15204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.990427][T15204] ? do_syscall_64+0x26/0x610 [ 347.995120][T15204] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.001199][T15204] ? do_syscall_64+0x26/0x610 [ 348.005894][T15204] __x64_sys_sendmsg+0x78/0xb0 [ 348.010668][T15204] do_syscall_64+0x103/0x610 [ 348.015273][T15204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.021167][T15204] RIP: 0033:0x458c29 [ 348.025113][T15204] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.044732][T15204] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.044748][T15204] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 348.044757][T15204] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 348.044765][T15204] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.044774][T15204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 348.044783][T15204] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 348.106965][T15219] binder: 15218:15219 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 09:16:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7b0020}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 348.164275][T15219] binder: 15218:15219 ioctl c0306201 200001c0 returned -14 09:16:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:29 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x48, 0x0, 0x0}) 09:16:29 executing program 4 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xf0ff7f}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 348.483488][T15241] FAULT_INJECTION: forcing a failure. [ 348.483488][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 348.498688][T15240] binder: 15238:15240 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 348.516570][T15240] binder: 15238:15240 ioctl c0306201 200001c0 returned -14 [ 348.553554][T15241] CPU: 1 PID: 15241 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 348.561596][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.571673][T15241] Call Trace: [ 348.575004][T15241] dump_stack+0x172/0x1f0 [ 348.579356][T15241] should_fail.cold+0xa/0x15 [ 348.583983][T15241] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.589809][T15241] ? ___might_sleep+0x163/0x280 [ 348.594679][T15241] __should_failslab+0x121/0x190 [ 348.599632][T15241] should_failslab+0x9/0x14 [ 348.604169][T15241] kmem_cache_alloc_node_trace+0x270/0x720 [ 348.610259][T15241] ? kasan_unpoison_shadow+0x35/0x50 [ 348.615563][T15241] __kmalloc_node+0x3d/0x70 [ 348.620081][T15241] kvmalloc_node+0x68/0x100 [ 348.624716][T15241] alloc_netdev_mqs+0x821/0xd30 [ 348.629585][T15241] rtnl_create_link+0x22d/0xac0 [ 348.634484][T15241] __rtnl_newlink+0xf7b/0x16c0 [ 348.639270][T15241] ? rtnl_link_unregister+0x250/0x250 [ 348.644682][T15241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.651118][T15241] ? is_bpf_text_address+0xd3/0x170 [ 348.656416][T15241] ? kernel_text_address+0x73/0xf0 [ 348.661983][T15241] ? __kernel_text_address+0xd/0x40 [ 348.667229][T15241] ? unwind_get_return_address+0x61/0xa0 [ 348.672901][T15241] ? __save_stack_trace+0x99/0x100 [ 348.678048][T15241] ? save_stack+0xa9/0xd0 [ 348.682565][T15241] ? save_stack+0x45/0xd0 [ 348.686919][T15241] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 348.692743][T15241] ? kasan_kmalloc+0x9/0x10 [ 348.697262][T15241] ? kmem_cache_alloc_trace+0x151/0x760 [ 348.702909][T15241] ? rtnl_newlink+0x4b/0xa0 [ 348.707432][T15241] ? rtnetlink_rcv_msg+0x465/0xb00 [ 348.712649][T15241] rtnl_newlink+0x69/0xa0 [ 348.716991][T15241] ? __rtnl_newlink+0x16c0/0x16c0 [ 348.722026][T15241] rtnetlink_rcv_msg+0x465/0xb00 [ 348.726983][T15241] ? rtnetlink_put_metrics+0x560/0x560 [ 348.732540][T15241] ? netdev_pick_tx+0x300/0x300 [ 348.737401][T15241] ? netlink_deliver_tap+0x22d/0xc00 [ 348.742695][T15241] ? find_held_lock+0x35/0x130 [ 348.747475][T15241] netlink_rcv_skb+0x17a/0x460 [ 348.752252][T15241] ? rtnetlink_put_metrics+0x560/0x560 [ 348.757811][T15241] ? netlink_ack+0xb50/0xb50 [ 348.762424][T15241] ? kasan_check_read+0x11/0x20 [ 348.767294][T15241] ? netlink_deliver_tap+0x254/0xc00 [ 348.772593][T15241] rtnetlink_rcv+0x1d/0x30 [ 348.777020][T15241] netlink_unicast+0x536/0x720 [ 348.781793][T15241] ? netlink_attachskb+0x770/0x770 [ 348.786913][T15241] ? _copy_from_iter_full+0x25d/0x900 [ 348.792303][T15241] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 348.798179][T15241] ? __check_object_size+0x3d/0x42f [ 348.806629][T15241] netlink_sendmsg+0x8ae/0xd70 [ 348.814981][T15241] ? netlink_unicast+0x720/0x720 [ 348.819946][T15241] ? tomoyo_socket_sendmsg+0x26/0x30 [ 348.825424][T15241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.831770][T15241] ? security_socket_sendmsg+0x93/0xc0 [ 348.837244][T15241] ? netlink_unicast+0x720/0x720 [ 348.842204][T15241] sock_sendmsg+0xdd/0x130 [ 348.846632][T15241] ___sys_sendmsg+0x806/0x930 [ 348.851325][T15241] ? copy_msghdr_from_user+0x430/0x430 [ 348.856897][T15241] ? kasan_check_read+0x11/0x20 [ 348.861771][T15241] ? __fget+0x381/0x550 [ 348.865954][T15241] ? ksys_dup3+0x3e0/0x3e0 [ 348.870574][T15241] ? __fget_light+0x1a9/0x230 [ 348.875266][T15241] ? __fdget+0x1b/0x20 [ 348.879352][T15241] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.885612][T15241] __sys_sendmsg+0x105/0x1d0 [ 348.890325][T15241] ? __ia32_sys_shutdown+0x80/0x80 [ 348.895711][T15241] ? fput_many+0x12c/0x1a0 [ 348.900434][T15241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.905970][T15241] ? do_syscall_64+0x26/0x610 [ 348.910928][T15241] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.917016][T15241] ? do_syscall_64+0x26/0x610 [ 348.921866][T15241] __x64_sys_sendmsg+0x78/0xb0 [ 348.927695][T15241] do_syscall_64+0x103/0x610 [ 348.932313][T15241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.938303][T15241] RIP: 0033:0x458c29 [ 348.942316][T15241] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.962307][T15241] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.970855][T15241] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 348.978853][T15241] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 348.986844][T15241] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.994850][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 09:16:30 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) [ 349.002938][T15241] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 09:16:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x4c, 0x0, 0x0}) 09:16:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:30 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 349.180923][T15260] binder: 15258:15260 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 349.213316][T15260] binder: 15258:15260 ioctl c0306201 200001c0 returned -14 09:16:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x60, 0x0, 0x0}) [ 349.363139][T15272] binder: 15271:15272 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 349.393285][T15272] binder: 15271:15272 ioctl c0306201 200001c0 returned -14 09:16:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x37, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x200000c0}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:16:30 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 09:16:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:30 executing program 4 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x68, 0x0, 0x0}) 09:16:30 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 09:16:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20007b00}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 349.597801][T15289] binder: 15286:15289 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 349.629725][T15289] binder: 15286:15289 ioctl c0306201 200001c0 returned -14 [ 349.690204][T15296] FAULT_INJECTION: forcing a failure. [ 349.690204][T15296] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 349.746359][T15296] CPU: 1 PID: 15296 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 349.754564][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.754577][T15296] Call Trace: [ 349.768180][T15296] dump_stack+0x172/0x1f0 [ 349.772532][T15296] should_fail.cold+0xa/0x15 [ 349.777142][T15296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 349.782969][T15296] ? is_bpf_text_address+0xd3/0x170 [ 349.788188][T15296] should_fail_alloc_page+0x50/0x60 [ 349.793489][T15296] __alloc_pages_nodemask+0x1a1/0x7e0 [ 349.798884][T15296] ? __save_stack_trace+0x99/0x100 [ 349.804014][T15296] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 349.809759][T15296] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 349.816025][T15296] alloc_pages_current+0x107/0x210 [ 349.821148][T15296] get_zeroed_page+0x14/0x50 [ 349.825749][T15296] dev_alloc_name_ns+0x14b/0x470 [ 349.830709][T15296] ? __dev_get_by_name+0x160/0x160 [ 349.835835][T15296] ? ipip6_tunnel_locate+0x234/0xa00 [ 349.841149][T15296] dev_get_valid_name+0x6c/0xd0 [ 349.846110][T15296] register_netdevice+0x284/0xff0 [ 349.851139][T15296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.857392][T15296] ? netdev_change_features+0xb0/0xb0 [ 349.862786][T15296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.869040][T15296] ? kasan_check_read+0x11/0x20 [ 349.873924][T15296] ipip6_tunnel_create+0x402/0x610 [ 349.879098][T15296] ipip6_newlink+0x147/0x350 [ 349.883725][T15296] ? ipip6_changelink+0x600/0x600 [ 349.888901][T15296] ? rtnl_create_link+0x192/0xac0 [ 349.893950][T15296] ? ipip6_changelink+0x600/0x600 [ 349.900627][T15296] __rtnl_newlink+0x107b/0x16c0 [ 349.905510][T15296] ? rtnl_link_unregister+0x250/0x250 [ 349.910942][T15296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.917204][T15296] ? is_bpf_text_address+0xd3/0x170 [ 349.922781][T15296] ? kernel_text_address+0x73/0xf0 [ 349.922803][T15306] binder: 15305:15306 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 349.927892][T15296] ? __kernel_text_address+0xd/0x40 [ 349.927911][T15296] ? unwind_get_return_address+0x61/0xa0 [ 349.927927][T15296] ? __save_stack_trace+0x99/0x100 [ 349.927956][T15296] ? save_stack+0xa9/0xd0 [ 349.927977][T15296] ? save_stack+0x45/0xd0 [ 349.936921][T15306] binder: 15305:15306 ioctl c0306201 200001c0 returned -14 [ 349.941938][T15296] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 349.941953][T15296] ? kasan_kmalloc+0x9/0x10 [ 349.941968][T15296] ? kmem_cache_alloc_trace+0x151/0x760 [ 349.941982][T15296] ? rtnl_newlink+0x4b/0xa0 [ 349.942001][T15296] ? rtnetlink_rcv_msg+0x465/0xb00 [ 349.994095][T15296] ? ib_uverbs_ex_create_flow+0x1200/0x178b [ 349.998104][T15309] binder: 15308:15309 ioctl c0306201 200001c0 returned -14 [ 350.000759][T15296] rtnl_newlink+0x69/0xa0 [ 350.000779][T15296] ? __rtnl_newlink+0x16c0/0x16c0 [ 350.017324][T15296] rtnetlink_rcv_msg+0x465/0xb00 [ 350.022276][T15296] ? rtnetlink_put_metrics+0x560/0x560 [ 350.027741][T15296] ? netdev_pick_tx+0x300/0x300 [ 350.032633][T15296] ? netlink_deliver_tap+0x22d/0xc00 [ 350.038032][T15296] ? find_held_lock+0x35/0x130 [ 350.042808][T15296] netlink_rcv_skb+0x17a/0x460 [ 350.047594][T15296] ? rtnetlink_put_metrics+0x560/0x560 [ 350.047625][T15312] binder: 15311:15312 ioctl c0306201 200001c0 returned -14 [ 350.053056][T15296] ? netlink_ack+0xb50/0xb50 [ 350.053083][T15296] ? kasan_check_read+0x11/0x20 [ 350.053100][T15296] ? netlink_deliver_tap+0x254/0xc00 [ 350.053122][T15296] rtnetlink_rcv+0x1d/0x30 [ 350.079450][T15296] netlink_unicast+0x536/0x720 [ 350.084236][T15296] ? netlink_attachskb+0x770/0x770 [ 350.089453][T15296] ? _copy_from_iter_full+0x25d/0x900 [ 350.094853][T15296] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 350.100585][T15296] ? __check_object_size+0x3d/0x42f [ 350.105817][T15296] netlink_sendmsg+0x8ae/0xd70 [ 350.110620][T15296] ? netlink_unicast+0x720/0x720 [ 350.112237][T15315] binder: 15314:15315 ioctl c0306201 200001c0 returned -14 [ 350.115583][T15296] ? tomoyo_socket_sendmsg+0x26/0x30 [ 350.115603][T15296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.115624][T15296] ? security_socket_sendmsg+0x93/0xc0 [ 350.139894][T15296] ? netlink_unicast+0x720/0x720 [ 350.144858][T15296] sock_sendmsg+0xdd/0x130 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x6c, 0x0, 0x0}) 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x74, 0x0, 0x0}) 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x7a, 0x0, 0x0}) 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x300, 0x0, 0x0}) [ 350.149286][T15296] ___sys_sendmsg+0x806/0x930 [ 350.153971][T15296] ? copy_msghdr_from_user+0x430/0x430 [ 350.154000][T15296] ? kasan_check_read+0x11/0x20 [ 350.154021][T15296] ? __fget+0x381/0x550 [ 350.164407][T15296] ? ksys_dup3+0x3e0/0x3e0 [ 350.164430][T15296] ? __fget_light+0x1a9/0x230 [ 350.164447][T15296] ? __fdget+0x1b/0x20 [ 350.181767][T15296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.188030][T15296] __sys_sendmsg+0x105/0x1d0 [ 350.192671][T15296] ? __ia32_sys_shutdown+0x80/0x80 [ 350.198093][T15296] ? fput_many+0x12c/0x1a0 [ 350.202538][T15296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 350.208011][T15296] ? do_syscall_64+0x26/0x610 [ 350.212789][T15296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.218879][T15296] ? do_syscall_64+0x26/0x610 [ 350.223570][T15296] __x64_sys_sendmsg+0x78/0xb0 [ 350.228346][T15296] do_syscall_64+0x103/0x610 [ 350.232951][T15296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.238850][T15296] RIP: 0033:0x458c29 [ 350.242759][T15296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.262387][T15296] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.271169][T15296] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 350.280176][T15296] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 350.288251][T15296] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.296235][T15296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 350.304392][T15296] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 09:16:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:16:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x500, 0x0, 0x0}) 09:16:31 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 09:16:31 executing program 4 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:16:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7fffeec7}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 350.411893][T15327] binder: 15322:15327 ioctl c0306201 200001c0 returned -14 09:16:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x600, 0x0, 0x0}) 09:16:31 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 09:16:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7fffefb0}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 350.547398][T15341] FAULT_INJECTION: forcing a failure. [ 350.547398][T15341] name failslab, interval 1, probability 0, space 0, times 0 [ 350.577534][T15345] binder: 15340:15345 ioctl c0306201 200001c0 returned -14 [ 350.601760][T15341] CPU: 0 PID: 15341 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 350.609893][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.609899][T15341] Call Trace: [ 350.609928][T15341] dump_stack+0x172/0x1f0 [ 350.609947][T15341] should_fail.cold+0xa/0x15 [ 350.609963][T15341] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 350.609986][T15341] ? ___might_sleep+0x163/0x280 [ 350.610004][T15341] __should_failslab+0x121/0x190 [ 350.610019][T15341] should_failslab+0x9/0x14 [ 350.610034][T15341] __kmalloc_track_caller+0x2d8/0x740 [ 350.610049][T15341] ? lockdep_hardirqs_on+0x418/0x5d0 [ 350.610064][T15341] ? trace_hardirqs_on+0x67/0x230 [ 350.610077][T15341] ? kasan_check_read+0x11/0x20 [ 350.610092][T15341] ? kstrdup_const+0x66/0x80 [ 350.610108][T15341] kstrdup+0x3a/0x70 [ 350.610127][T15341] kstrdup_const+0x66/0x80 [ 350.638366][T15341] kvasprintf_const+0x10e/0x190 [ 350.638387][T15341] kobject_set_name_vargs+0x5b/0x150 [ 350.638404][T15341] dev_set_name+0xbd/0xf0 09:16:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7ffff000}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 350.638418][T15341] ? device_initialize+0x440/0x440 [ 350.638437][T15341] ? __init_waitqueue_head+0x36/0x90 [ 350.638453][T15341] ? pm_runtime_init+0x311/0x3b0 [ 350.638475][T15341] netdev_register_kobject+0xc3/0x3c0 [ 350.638495][T15341] register_netdevice+0x878/0xff0 [ 350.638512][T15341] ? netdev_change_features+0xb0/0xb0 [ 350.638533][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.732666][T15341] ? kasan_check_read+0x11/0x20 [ 350.743976][T15341] ipip6_tunnel_create+0x402/0x610 [ 350.749174][T15341] ipip6_newlink+0x147/0x350 [ 350.749199][T15341] ? ipip6_changelink+0x600/0x600 [ 350.749219][T15341] ? rtnl_create_link+0x192/0xac0 [ 350.749236][T15341] ? ipip6_changelink+0x600/0x600 [ 350.749249][T15341] __rtnl_newlink+0x107b/0x16c0 [ 350.749273][T15341] ? rtnl_link_unregister+0x250/0x250 [ 350.749289][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.749318][T15341] ? is_bpf_text_address+0xd3/0x170 [ 350.790739][T15341] ? kernel_text_address+0x73/0xf0 [ 350.795882][T15341] ? __kernel_text_address+0xd/0x40 [ 350.801097][T15341] ? unwind_get_return_address+0x61/0xa0 [ 350.806798][T15341] ? __save_stack_trace+0x99/0x100 [ 350.811958][T15341] ? save_stack+0xa9/0xd0 [ 350.816303][T15341] ? save_stack+0x45/0xd0 [ 350.820649][T15341] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 350.826465][T15341] ? kasan_kmalloc+0x9/0x10 [ 350.830986][T15341] ? kmem_cache_alloc_trace+0x151/0x760 [ 350.836670][T15341] ? rtnl_newlink+0x4b/0xa0 [ 350.841178][T15341] ? rtnetlink_rcv_msg+0x465/0xb00 [ 350.846356][T15341] rtnl_newlink+0x69/0xa0 [ 350.850703][T15341] ? __rtnl_newlink+0x16c0/0x16c0 [ 350.855740][T15341] rtnetlink_rcv_msg+0x465/0xb00 [ 350.860703][T15341] ? rtnetlink_put_metrics+0x560/0x560 [ 350.866176][T15341] ? netdev_pick_tx+0x300/0x300 [ 350.871141][T15341] ? netlink_deliver_tap+0x22d/0xc00 [ 350.876454][T15341] ? find_held_lock+0x35/0x130 [ 350.881243][T15341] netlink_rcv_skb+0x17a/0x460 [ 350.886063][T15341] ? rtnetlink_put_metrics+0x560/0x560 [ 350.891925][T15341] ? netlink_ack+0xb50/0xb50 [ 350.896542][T15341] ? kasan_check_read+0x11/0x20 09:16:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x8dffffff}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 350.901409][T15341] ? netlink_deliver_tap+0x254/0xc00 [ 350.906887][T15341] rtnetlink_rcv+0x1d/0x30 [ 350.911317][T15341] netlink_unicast+0x536/0x720 [ 350.916100][T15341] ? netlink_attachskb+0x770/0x770 [ 350.921225][T15341] ? _copy_from_iter_full+0x25d/0x900 [ 350.926609][T15341] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 350.932339][T15341] ? __check_object_size+0x3d/0x42f [ 350.937567][T15341] netlink_sendmsg+0x8ae/0xd70 [ 350.942356][T15341] ? netlink_unicast+0x720/0x720 [ 350.947320][T15341] ? tomoyo_socket_sendmsg+0x26/0x30 [ 350.952630][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.958881][T15341] ? security_socket_sendmsg+0x93/0xc0 [ 350.958896][T15341] ? netlink_unicast+0x720/0x720 [ 350.958912][T15341] sock_sendmsg+0xdd/0x130 [ 350.958929][T15341] ___sys_sendmsg+0x806/0x930 [ 350.958945][T15341] ? copy_msghdr_from_user+0x430/0x430 [ 350.958971][T15341] ? kasan_check_read+0x11/0x20 [ 350.958993][T15341] ? __fget+0x381/0x550 [ 350.973894][T15341] ? ksys_dup3+0x3e0/0x3e0 [ 350.997488][T15341] ? __fget_light+0x1a9/0x230 09:16:32 executing program 0: getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 351.002274][T15341] ? __fdget+0x1b/0x20 [ 351.006451][T15341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.013318][T15341] __sys_sendmsg+0x105/0x1d0 [ 351.017933][T15341] ? __ia32_sys_shutdown+0x80/0x80 [ 351.023235][T15341] ? fput_many+0x12c/0x1a0 [ 351.027786][T15341] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.033265][T15341] ? do_syscall_64+0x26/0x610 [ 351.037975][T15341] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.044184][T15341] ? do_syscall_64+0x26/0x610 [ 351.048980][T15341] __x64_sys_sendmsg+0x78/0xb0 [ 351.053937][T15341] do_syscall_64+0x103/0x610 [ 351.058563][T15341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.064550][T15341] RIP: 0033:0x458c29 [ 351.068450][T15341] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.088062][T15341] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:16:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x39, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 351.096662][T15341] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 351.104751][T15341] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 351.112736][T15341] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.120727][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 351.128815][T15341] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 351.205053][T15341] ------------[ cut here ]------------ [ 351.210562][T15341] kernel BUG at net/core/net-sysfs.c:1631! [ 351.225751][T15341] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 351.231865][T15341] CPU: 1 PID: 15341 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #69 [ 351.239871][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.249948][T15341] RIP: 0010:netdev_release+0x92/0xb0 [ 351.255243][T15341] Code: 48 c1 ea 03 80 3c 02 00 75 29 48 8b bb 80 fa ff ff e8 72 af 21 fc 4c 89 ef e8 9a c2 f5 ff 5b 41 5c 41 5d 5d c3 e8 4e da e9 fb <0f> 0b e8 97 e9 21 fc eb 9c e8 f0 e9 21 fc eb d0 0f 1f 40 00 66 2e [ 351.274968][T15341] RSP: 0018:ffff8880575eef08 EFLAGS: 00010246 [ 351.281047][T15341] RAX: 0000000000040000 RBX: ffff888094cfd320 RCX: ffffc9000e64f000 [ 351.289029][T15341] RDX: 0000000000040000 RSI: ffffffff8586b262 RDI: 0000000000000001 [ 351.297009][T15341] RBP: ffff8880575eef20 R08: ffff8880a50fa180 R09: ffff8880a50faa20 [ 351.305174][T15341] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.313423][T15341] R13: ffff888094cfcd80 R14: 0000000000000000 R15: 0000000000000000 [ 351.321417][T15341] FS: 00007f12b59bc700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 351.330529][T15341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.337590][T15341] CR2: 00007f47fd59e000 CR3: 000000008e44f000 CR4: 00000000001426e0 [ 351.342643][ T3875] kobject: 'loop1' (000000002f0c13b2): kobject_uevent_env 09:16:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) 09:16:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\fc\x00\x00\vc'], 0x700, 0x0, 0x0}) [ 351.345574][T15341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.345582][T15341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.345587][T15341] Call Trace: [ 351.345607][T15341] ? xps_cpus_store+0x2b0/0x2b0 [ 351.345631][T15341] device_release+0x7d/0x210 [ 351.352880][ T3875] kobject: 'loop1' (000000002f0c13b2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 351.360702][T15341] kobject_put.cold+0x28f/0x2ec [ 351.360720][T15341] put_device+0x20/0x30 [ 351.360743][T15341] netdev_register_kobject+0x1a1/0x3c0 [ 351.360762][T15341] register_netdevice+0x878/0xff0 [ 351.411043][T15341] ? netdev_change_features+0xb0/0xb0 [ 351.416512][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.422772][T15341] ? kasan_check_read+0x11/0x20 [ 351.427631][T15341] ipip6_tunnel_create+0x402/0x610 [ 351.432843][T15341] ipip6_newlink+0x147/0x350 [ 351.437449][T15341] ? ipip6_changelink+0x600/0x600 [ 351.442492][T15341] ? rtnl_create_link+0x192/0xac0 [ 351.447527][T15341] ? ipip6_changelink+0x600/0x600 09:16:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x3a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 351.452562][T15341] __rtnl_newlink+0x107b/0x16c0 [ 351.457441][T15341] ? rtnl_link_unregister+0x250/0x250 [ 351.462822][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.469093][T15341] ? is_bpf_text_address+0xd3/0x170 [ 351.474297][T15341] ? kernel_text_address+0x73/0xf0 [ 351.479427][T15341] ? __kernel_text_address+0xd/0x40 [ 351.484641][T15341] ? unwind_get_return_address+0x61/0xa0 [ 351.490281][T15341] ? __save_stack_trace+0x99/0x100 [ 351.495409][T15341] ? save_stack+0xa9/0xd0 [ 351.499623][ T3875] kobject: 'loop3' (000000004568c1a0): kobject_uevent_env [ 351.499756][T15341] ? save_stack+0x45/0xd0 [ 351.508966][ T3875] kobject: 'loop3' (000000004568c1a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 351.511169][T15341] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 351.511181][T15341] ? kasan_kmalloc+0x9/0x10 [ 351.511200][T15341] ? kmem_cache_alloc_trace+0x151/0x760 [ 351.537282][T15341] ? rtnl_newlink+0x4b/0xa0 [ 351.541978][T15341] ? rtnetlink_rcv_msg+0x465/0xb00 [ 351.547132][T15341] rtnl_newlink+0x69/0xa0 [ 351.551486][T15341] ? __rtnl_newlink+0x16c0/0x16c0 [ 351.556524][T15341] rtnetlink_rcv_msg+0x465/0xb00 [ 351.561584][T15341] ? rtnetlink_put_metrics+0x560/0x560 [ 351.563574][ T3875] kobject: 'loop2' (0000000073010b97): kobject_uevent_env [ 351.567047][T15341] ? netdev_pick_tx+0x300/0x300 [ 351.567062][T15341] ? netlink_deliver_tap+0x22d/0xc00 [ 351.567076][T15341] ? find_held_lock+0x35/0x130 [ 351.567088][T15341] netlink_rcv_skb+0x17a/0x460 [ 351.567108][T15341] ? rtnetlink_put_metrics+0x560/0x560 [ 351.574335][ T3875] kobject: 'loop2' (0000000073010b97): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 351.579045][T15341] ? netlink_ack+0xb50/0xb50 [ 351.579062][T15341] ? kasan_check_read+0x11/0x20 [ 351.579074][T15341] ? netlink_deliver_tap+0x254/0xc00 [ 351.579090][T15341] rtnetlink_rcv+0x1d/0x30 [ 351.579105][T15341] netlink_unicast+0x536/0x720 [ 351.634008][T15341] ? netlink_attachskb+0x770/0x770 [ 351.639135][T15341] ? _copy_from_iter_full+0x25d/0x900 [ 351.644521][T15341] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 351.650259][T15341] ? __check_object_size+0x3d/0x42f [ 351.655471][T15341] netlink_sendmsg+0x8ae/0xd70 [ 351.660248][T15341] ? netlink_unicast+0x720/0x720 [ 351.665205][T15341] ? tomoyo_socket_sendmsg+0x26/0x30 [ 351.670583][T15341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.676839][T15341] ? security_socket_sendmsg+0x93/0xc0 [ 351.682421][T15341] ? netlink_unicast+0x720/0x720 [ 351.687470][T15341] sock_sendmsg+0xdd/0x130 [ 351.692001][T15341] ___sys_sendmsg+0x806/0x930 [ 351.696888][T15341] ? copy_msghdr_from_user+0x430/0x430 [ 351.702446][T15341] ? kasan_check_read+0x11/0x20 [ 351.707287][T15341] ? __fget+0x381/0x550 [ 351.711467][T15341] ? ksys_dup3+0x3e0/0x3e0 [ 351.715879][T15341] ? __fget_light+0x1a9/0x230 [ 351.721238][T15341] ? __fdget+0x1b/0x20 [ 351.725406][T15341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.733371][T15341] __sys_sendmsg+0x105/0x1d0 [ 351.737980][T15341] ? __ia32_sys_shutdown+0x80/0x80 [ 351.743103][T15341] ? fput_many+0x12c/0x1a0 [ 351.747534][T15341] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 351.753006][T15341] ? do_syscall_64+0x26/0x610 [ 351.757699][T15341] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.763776][T15341] ? do_syscall_64+0x26/0x610 [ 351.768478][T15341] __x64_sys_sendmsg+0x78/0xb0 [ 351.773255][T15341] do_syscall_64+0x103/0x610 [ 351.778037][T15341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.783931][T15341] RIP: 0033:0x458c29 [ 351.787825][T15341] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.807433][T15341] RSP: 002b:00007f12b59bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.815939][T15341] RAX: ffffffffffffffda RBX: 00007f12b59bbc90 RCX: 0000000000458c29 [ 351.823953][T15341] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 351.830758][ T3875] kobject: 'loop3' (000000004568c1a0): kobject_uevent_env [ 351.832099][T15341] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.832108][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12b59bc6d4 [ 351.832115][T15341] R13: 00000000004c6516 R14: 00000000004dae80 R15: 0000000000000005 [ 351.832132][T15341] Modules linked in: [ 351.841265][ T3875] kobject: 'loop3' (000000004568c1a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 351.853309][T15341] ---[ end trace 6a0a5a4aa0f46295 ]--- [ 351.868918][ T3875] kobject: 'loop5' (00000000f4cc84ca): kobject_uevent_env [ 351.883314][T15341] RIP: 0010:netdev_release+0x92/0xb0 [ 351.897708][ T3875] kobject: 'loop5' (00000000f4cc84ca): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 351.898078][ T3875] kobject: 'loop0' (0000000043c16e93): kobject_uevent_env [ 351.911744][T15341] Code: 48 c1 ea 03 80 3c 02 00 75 29 48 8b bb 80 fa ff ff e8 72 af 21 fc 4c 89 ef e8 9a c2 f5 ff 5b 41 5c 41 5d 5d c3 e8 4e da e9 fb <0f> 0b e8 97 e9 21 fc eb 9c e8 f0 e9 21 fc eb d0 0f 1f 40 00 66 2e [ 351.915550][ T3875] kobject: 'loop0' (0000000043c16e93): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 351.936745][T15341] RSP: 0018:ffff8880575eef08 EFLAGS: 00010246 [ 351.957103][T15341] RAX: 0000000000040000 RBX: ffff888094cfd320 RCX: ffffc9000e64f000 [ 351.965112][T15341] RDX: 0000000000040000 RSI: ffffffff8586b262 RDI: 0000000000000001 [ 351.974070][T15341] RBP: ffff8880575eef20 R08: ffff8880a50fa180 R09: ffff8880a50faa20 [ 351.982625][T15341] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.991560][T15341] R13: ffff888094cfcd80 R14: 0000000000000000 R15: 0000000000000000 [ 352.000196][T15341] FS: 00007f12b59bc700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 352.009975][T15341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.016875][T15341] CR2: 00007f9f108db848 CR3: 000000008e44f000 CR4: 00000000001426e0 [ 352.025053][T15341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.033147][T15341] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.041282][T15341] Kernel panic - not syncing: Fatal exception [ 352.048569][T15341] Kernel Offset: disabled [ 352.052896][T15341] Rebooting in 86400 seconds..